From 46c2b24c0cfb294b01484c2813bd19db4caa50db Mon Sep 17 00:00:00 2001 From: dwertent Date: Thu, 14 Oct 2021 14:41:13 +0300 Subject: [PATCH] remove unitest --- reporthandling/datastructuresmethods_test.go | 146 +- reporthandling/mock/resultswithexceptions.go | 376168 ---------------- 2 files changed, 73 insertions(+), 376241 deletions(-) delete mode 100644 reporthandling/mock/resultswithexceptions.go diff --git a/reporthandling/datastructuresmethods_test.go b/reporthandling/datastructuresmethods_test.go index 094a712c..f10d228f 100644 --- a/reporthandling/datastructuresmethods_test.go +++ b/reporthandling/datastructuresmethods_test.go @@ -1,83 +1,83 @@ package reporthandling -import ( - "encoding/json" - "testing" +// import ( +// "encoding/json" +// "testing" - "github.com/armosec/opa-utils/reporthandling/mock" - "github.com/stretchr/testify/assert" -) +// "github.com/armosec/opa-utils/reporthandling/mock" +// "github.com/stretchr/testify/assert" +// ) -func FrameworkResultsMock(report string) (*FrameworkReport, error) { - frameworkReport := &FrameworkReport{} - if err := json.Unmarshal([]byte(report), frameworkReport); err != nil { - return nil, err - } - return frameworkReport, nil -} +// func FrameworkResultsMock(report string) (*FrameworkReport, error) { +// frameworkReport := &FrameworkReport{} +// if err := json.Unmarshal([]byte(report), frameworkReport); err != nil { +// return nil, err +// } +// return frameworkReport, nil +// } -func ControlsResultsMock(report string) ([]ControlReport, error) { - f, err := FrameworkResultsMock(report) - if err != nil { - return nil, err - } - return f.ControlReports, nil -} +// func ControlsResultsMock(report string) ([]ControlReport, error) { +// f, err := FrameworkResultsMock(report) +// if err != nil { +// return nil, err +// } +// return f.ControlReports, nil +// } -func TestControlsResults(t *testing.T) { - framework, err := FrameworkResultsMock(mock.NSAScanWithExceptions) - assert.NoError(t, err, err) - assert.Equal(t, len(framework.ControlReports), 21) +// func TestControlsResults(t *testing.T) { +// framework, err := FrameworkResultsMock(mock.NSAScanWithExceptions) +// assert.NoError(t, err, err) +// assert.Equal(t, len(framework.ControlReports), 21) - SetUniqueResourcesCounter(framework) +// SetUniqueResourcesCounter(framework) - assert.Equal(t, 106, framework.GetNumberOfFailedResources(), "framework.GetNumberOfFailedResources") - assert.Equal(t, 30, framework.GetNumberOfWarningResources(), "framework.GetNumberOfWarningResources") +// assert.Equal(t, 106, framework.GetNumberOfFailedResources(), "framework.GetNumberOfFailedResources") +// assert.Equal(t, 30, framework.GetNumberOfWarningResources(), "framework.GetNumberOfWarningResources") - for _, control := range framework.ControlReports { - switch control.ControlID { - case "C-0005": - assert.Equal(t, 0, control.GetNumberOfFailedResources(), "C-0005: control.GetNumberOfFailedResources") - assert.Equal(t, 0, control.GetNumberOfFailedResources(), "C-0005: control.GetNumberOfFailedResources") - assert.Equal(t, 0, control.GetNumberOfWarningResources(), "C-0005: GetNumberOfWarningResources") - assert.True(t, control.Passed(), "C-0005: Passed") - assert.False(t, control.Warning(), "C-0005: Warning") - assert.False(t, control.Failed(), "C-0005: Failed") +// for _, control := range framework.ControlReports { +// switch control.ControlID { +// case "C-0005": +// assert.Equal(t, 0, control.GetNumberOfFailedResources(), "C-0005: control.GetNumberOfFailedResources") +// assert.Equal(t, 0, control.GetNumberOfFailedResources(), "C-0005: control.GetNumberOfFailedResources") +// assert.Equal(t, 0, control.GetNumberOfWarningResources(), "C-0005: GetNumberOfWarningResources") +// assert.True(t, control.Passed(), "C-0005: Passed") +// assert.False(t, control.Warning(), "C-0005: Warning") +// assert.False(t, control.Failed(), "C-0005: Failed") - case "C-0038": - assert.Equal(t, 0, control.GetNumberOfFailedResources(), "C-0038: GetNumberOfFailedResources") - assert.Equal(t, 0, control.GetNumberOfWarningResources(), "C-0038: GetNumberOfWarningResources") - assert.True(t, control.Passed(), "C-0038: Passed") - assert.False(t, control.Warning(), "C-0038: Warning") - assert.False(t, control.Failed(), "C-0038: Failed") - case "C-0017": // TODO - test - assert.Equal(t, 29, control.GetNumberOfFailedResources(), "C-0017: GetNumberOfFailedResources") - assert.Equal(t, 10, control.GetNumberOfWarningResources(), "C-0017: GetNumberOfWarningResources") - assert.False(t, control.Passed(), "C-0017: Passed") - assert.False(t, control.Warning(), "C-0017: Warning") - assert.True(t, control.Failed(), "C-0017: Failed") - for _, rule := range control.RuleReports { - assert.Equal(t, 29, rule.GetNumberOfFailedResources(), "C-0017: rule.GetNumberOfFailedResources") - assert.Equal(t, 10, rule.GetNumberOfWarningResources(), "C-0017: rule.GetNumberOfWarningResources") - } - case "C-0009": // TODO - test - assert.Equal(t, 0, control.GetNumberOfFailedResources(), "C-0009: GetNumberOfFailedResources") - assert.Equal(t, 13, control.GetNumberOfWarningResources(), "C-0009: GetNumberOfWarningResources") - assert.False(t, control.Passed(), "C-0009: Passed") - assert.True(t, control.Warning(), "C-0009: Warning") - assert.False(t, control.Failed(), "C-0009: Failed") - case "C-0030": // TODO - test - assert.Equal(t, 29, control.GetNumberOfFailedResources(), "C-0030: GetNumberOfFailedResources") - assert.Equal(t, 10, control.GetNumberOfWarningResources(), "C-0030: GetNumberOfWarningResources") - assert.False(t, control.Passed(), "C-0030: Passed") - assert.False(t, control.Warning(), "C-0030: Warning") - assert.True(t, control.Failed(), "C-0030: Failed") - case "C-0013": // TODO - test - assert.Equal(t, 0, control.GetNumberOfFailedResources(), "C-0013: GetNumberOfFailedResources") - assert.Equal(t, 0, control.GetNumberOfWarningResources(), "C-0013: GetNumberOfWarningResources") - assert.True(t, control.Passed(), "C-0013: Passed") - assert.False(t, control.Warning(), "C-0013: Warning") - assert.False(t, control.Failed(), "C-0013: Failed") - } - } -} +// case "C-0038": +// assert.Equal(t, 0, control.GetNumberOfFailedResources(), "C-0038: GetNumberOfFailedResources") +// assert.Equal(t, 0, control.GetNumberOfWarningResources(), "C-0038: GetNumberOfWarningResources") +// assert.True(t, control.Passed(), "C-0038: Passed") +// assert.False(t, control.Warning(), "C-0038: Warning") +// assert.False(t, control.Failed(), "C-0038: Failed") +// case "C-0017": // TODO - test +// assert.Equal(t, 29, control.GetNumberOfFailedResources(), "C-0017: GetNumberOfFailedResources") +// assert.Equal(t, 10, control.GetNumberOfWarningResources(), "C-0017: GetNumberOfWarningResources") +// assert.False(t, control.Passed(), "C-0017: Passed") +// assert.False(t, control.Warning(), "C-0017: Warning") +// assert.True(t, control.Failed(), "C-0017: Failed") +// for _, rule := range control.RuleReports { +// assert.Equal(t, 29, rule.GetNumberOfFailedResources(), "C-0017: rule.GetNumberOfFailedResources") +// assert.Equal(t, 10, rule.GetNumberOfWarningResources(), "C-0017: rule.GetNumberOfWarningResources") +// } +// case "C-0009": // TODO - test +// assert.Equal(t, 0, control.GetNumberOfFailedResources(), "C-0009: GetNumberOfFailedResources") +// assert.Equal(t, 13, control.GetNumberOfWarningResources(), "C-0009: GetNumberOfWarningResources") +// assert.False(t, control.Passed(), "C-0009: Passed") +// assert.True(t, control.Warning(), "C-0009: Warning") +// assert.False(t, control.Failed(), "C-0009: Failed") +// case "C-0030": // TODO - test +// assert.Equal(t, 29, control.GetNumberOfFailedResources(), "C-0030: GetNumberOfFailedResources") +// assert.Equal(t, 10, control.GetNumberOfWarningResources(), "C-0030: GetNumberOfWarningResources") +// assert.False(t, control.Passed(), "C-0030: Passed") +// assert.False(t, control.Warning(), "C-0030: Warning") +// assert.True(t, control.Failed(), "C-0030: Failed") +// case "C-0013": // TODO - test +// assert.Equal(t, 0, control.GetNumberOfFailedResources(), "C-0013: GetNumberOfFailedResources") +// assert.Equal(t, 0, control.GetNumberOfWarningResources(), "C-0013: GetNumberOfWarningResources") +// assert.True(t, control.Passed(), "C-0013: Passed") +// assert.False(t, control.Warning(), "C-0013: Warning") +// assert.False(t, control.Failed(), "C-0013: Failed") +// } +// } +// } diff --git a/reporthandling/mock/resultswithexceptions.go b/reporthandling/mock/resultswithexceptions.go deleted file mode 100644 index bd89f0a3..00000000 --- a/reporthandling/mock/resultswithexceptions.go +++ /dev/null @@ -1,376168 +0,0 @@ -package mock - -var NSAScanWithExceptions = ` -{ - "name": "NSA", - "controlReports": [ - { - "guid": "", - "attributes": { - "armoBuiltin": true - }, - "id": "C-0005", - "controlID": "C-0005", - "name": "Control plane hardening", - "ruleReports": [ - { - "name": "insecure-port-flag", - "remediation": "", - "ruleStatus": { - "status": "success", - "message": "" - }, - "ruleResponses": null, - "listInputResources": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-audit\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-audit\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CONFIG_FILES\",\"value\":\"/config/config.json\"},{\"name\":\"CA_SERVER_TYPE\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"cluster_kind\",\"name\":\"ca-audit\"}}}],\"image\":\"quay.io/armosec/k8s-ca-auditlog-ubi:21\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-audit\",\"ports\":[{\"containerPort\":443,\"name\":\"ca-audit-port\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/config\",\"name\":\"ca-audit\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-audit\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"config\",\"path\":\"config.json\"}],\"name\":\"ca-audit\"},\"name\":\"ca-audit\"},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:54Z", - "generation": 1, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CONFIG_FILES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_SERVER_TYPE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:54Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-audit", - "namespace": "cyberarmor-system", - "resourceVersion": "60787209", - "uid": "687f52ea-6956-4e8a-bb8c-7ea35a04b3f0" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-audit" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CONFIG_FILES", - "value": "/config/config.json" - }, - { - "name": "CA_SERVER_TYPE", - "valueFrom": { - "configMapKeyRef": { - "key": "cluster_kind", - "name": "ca-audit" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-auditlog-ubi:21", - "imagePullPolicy": "Always", - "name": "ca-audit", - "ports": [ - { - "containerPort": 443, - "name": "ca-audit-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/config", - "name": "ca-audit", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-audit", - "serviceAccountName": "ca-audit", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "config", - "path": "config.json" - } - ], - "name": "ca-audit" - }, - "name": "ca-audit" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:54Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-audit-c667df747\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-dashboard-aggregator\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-dashboard-aggregator\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-configtype=1\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-dashboard-aggregator\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"40Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:55Z", - "generation": 1, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-dashboard-aggregator\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:55Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T23:55:20Z" - } - ], - "name": "ca-dashboard-aggregator", - "namespace": "cyberarmor-system", - "resourceVersion": "61250607", - "uid": "0ba23569-e254-4388-b22f-30cc1eca031b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-dashboard-aggregator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-configtype=1", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173", - "imagePullPolicy": "Always", - "name": "ca-dashboard-aggregator", - "resources": { - "limits": { - "cpu": "200m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "40Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:18:55Z", - "lastUpdateTime": "2021-10-12T00:19:19Z", - "message": "ReplicaSet \"ca-dashboard-aggregator-5b8bdbc8f5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-12T23:55:20Z", - "lastUpdateTime": "2021-10-12T23:55:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-notification-server\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-notification-server\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"maserNotificationServer\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\",\"value\":\"customerGUID\"},{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\",\"value\":\"8001\"},{\"name\":\"CA_NOTIFICATION_SERVER_PORT\",\"value\":\"8002\"}],\"image\":\"quay.io/armosec/notification-server-ubi:89\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-notification-server\",\"ports\":[{\"containerPort\":8001,\"name\":\"websocket\"},{\"containerPort\":8002,\"name\":\"rest-api\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:59Z", - "generation": 1, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-notification-server\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8001,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:59Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:11Z" - } - ], - "name": "ca-notification-server", - "namespace": "cyberarmor-system", - "resourceVersion": "60787036", - "uid": "8c3dc6fe-e730-4364-8445-dc5a05ad2b0f" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-notification-server" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_HOST", - "valueFrom": { - "configMapKeyRef": { - "key": "maserNotificationServer", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_ATTRIBUTES", - "value": "customerGUID" - }, - { - "name": "CA_NOTIFICATION_SERVER_WS_PORT", - "value": "8001" - }, - { - "name": "CA_NOTIFICATION_SERVER_PORT", - "value": "8002" - } - ], - "image": "quay.io/armosec/notification-server-ubi:89", - "imagePullPolicy": "Always", - "name": "ca-notification-server", - "ports": [ - { - "containerPort": 8001, - "name": "websocket", - "protocol": "TCP" - }, - { - "containerPort": 8002, - "name": "rest-api", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "50Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:11Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:59Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "ReplicaSet \"ca-notification-server-6fd966c875\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-ocimage\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-ocimage\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-ocimage:63\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-ocimage\",\"ports\":[{\"containerPort\":8080,\"name\":\"ca-ocimage-port\"}],\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:51Z", - "generation": 1, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-ocimage\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:04Z" - } - ], - "name": "ca-ocimage", - "namespace": "cyberarmor-system", - "resourceVersion": "60786986", - "uid": "a6d37edf-b144-4677-91b3-73c73d9c7df6" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-ocimage" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-ocimage:63", - "imagePullPolicy": "Always", - "name": "ca-ocimage", - "ports": [ - { - "containerPort": 8080, - "name": "ca-ocimage-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "1", - "memory": "1000Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:04Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:51Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "ReplicaSet \"ca-ocimage-5576ff7d7d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-oracle\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-oracle\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_ORACLE_PORT\",\"value\":\"4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8002\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-oracle-ubi:11\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-oracle\",\"ports\":[{\"containerPort\":4000,\"name\":\"ca-oracle\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:19:01Z", - "generation": 1, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-oracle\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:19:01Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-oracle", - "namespace": "cyberarmor-system", - "resourceVersion": "60787203", - "uid": "da3dd21c-bf13-4d2a-97da-ca80b94d08d3" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-oracle" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_ORACLE_PORT", - "value": "4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8002" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-oracle-ubi:11", - "imagePullPolicy": "Always", - "name": "ca-oracle", - "ports": [ - { - "containerPort": 4000, - "name": "ca-oracle", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:19:01Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-oracle-6c98c6bdbf\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-posture\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-posture\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8001\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-posture-ubi:112\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-posture\",\"ports\":[{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/resources/config\",\"name\":\"ca-posture-score-config\",\"readOnly\":false},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"},{\"configMap\":{\"items\":[{\"key\":\"resourcesdict.json\",\"path\":\"resourcesdict.json\"},{\"key\":\"frameworkdict.json\",\"path\":\"frameworkdict.json\"}],\"name\":\"ca-posture-score-config\"},\"name\":\"ca-posture-score-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:58Z", - "generation": 1, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-posture\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/resources/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-posture-score-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:58Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:45Z" - } - ], - "name": "ca-posture", - "namespace": "cyberarmor-system", - "resourceVersion": "60787259", - "uid": "f41f4dc1-cfb0-4201-bca7-f1cf0b72b6b7" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-posture" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8001" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-posture-ubi:112", - "imagePullPolicy": "Always", - "name": "ca-posture", - "ports": [ - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "500m", - "memory": "100Mi" - }, - "requests": { - "cpu": "100m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/resources/config", - "name": "ca-posture-score-config" - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "resourcesdict.json", - "path": "resourcesdict.json" - }, - { - "key": "frameworkdict.json", - "path": "frameworkdict.json" - } - ], - "name": "ca-posture-score-config" - }, - "name": "ca-posture-score-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:45Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:58Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "ReplicaSet \"ca-posture-5996968d7b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-rbac\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-rbac\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"S3_BUCKET\",\"value\":\"ca-kubernetes-rbac-db-dev\"},{\"name\":\"AWS_REGION\",\"value\":\"eu-west-1\"},{\"name\":\"AWS_ACCESS_KEY_ID\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keyid\",\"name\":\"ca-rbac\"}}},{\"name\":\"AWS_SECRET_ACCESS_KEY\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keysecret\",\"name\":\"ca-rbac\"}}}],\"image\":\"quay.io/armosec/k8s-ca-rbac-scanner-ubi:20\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-rbac\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"400Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:50Z", - "generation": 1, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-rbac\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AWS_ACCESS_KEY_ID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"AWS_REGION\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"AWS_SECRET_ACCESS_KEY\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"S3_BUCKET\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:13Z" - } - ], - "name": "ca-rbac", - "namespace": "cyberarmor-system", - "resourceVersion": "60787051", - "uid": "d5898a09-2489-4254-b210-0725ddb2427a" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-rbac" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "S3_BUCKET", - "value": "ca-kubernetes-rbac-db-dev" - }, - { - "name": "AWS_REGION", - "value": "eu-west-1" - }, - { - "name": "AWS_ACCESS_KEY_ID", - "valueFrom": { - "secretKeyRef": { - "key": "keyid", - "name": "ca-rbac" - } - } - }, - { - "name": "AWS_SECRET_ACCESS_KEY", - "valueFrom": { - "secretKeyRef": { - "key": "keysecret", - "name": "ca-rbac" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-rbac-scanner-ubi:20", - "imagePullPolicy": "Always", - "name": "ca-rbac", - "resources": { - "limits": { - "cpu": "200m", - "memory": "400Mi" - }, - "requests": { - "cpu": "10m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:13Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:50Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "ReplicaSet \"ca-rbac-75c8cfd6b4\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-vuln-scan\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-vuln-scan\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"EVENT_RECEIVER_URL\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\",\"value\":\"4\"}],\"image\":\"quay.io/armosec/k8s-ca-vuln-scan-ubi:84\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-vuln-scan\",\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1.5Gi\"},\"requests\":{\"cpu\":\"500m\",\"memory\":\"1Gi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:47Z", - "generation": 1, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-vuln-scan\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EVENT_RECEIVER_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:00Z" - } - ], - "name": "ca-vuln-scan", - "namespace": "cyberarmor-system", - "resourceVersion": "60786938", - "uid": "9ea3d6cb-c6c0-423f-aab2-630827939285" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-vuln-scan" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "EVENT_RECEIVER_URL", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_MAX_VULN_SCAN_ROUTINS", - "value": "4" - } - ], - "image": "quay.io/armosec/k8s-ca-vuln-scan-ubi:84", - "imagePullPolicy": "Always", - "name": "ca-vuln-scan", - "resources": { - "limits": { - "cpu": "1", - "memory": "1536Mi" - }, - "requests": { - "cpu": "500m", - "memory": "1Gi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:00Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:47Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "ReplicaSet \"ca-vuln-scan-75b499df8c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-webhook\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-webhook\"}},\"template\":{\"metadata\":{\"annotations\":{\"certificate\":\"d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt\"},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-tlsCertFile=/etc/webhook/certs/tls.crt\",\"-tlsKeyFile=/etc/webhook/certs/tls.key\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_WEBHOOK_NAME\",\"value\":\"ca-webhook\"},{\"name\":\"CA_WEBHOOK_PORT\",\"value\":\"443\"},{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_LOGIN_SECRET_NAME\",\"value\":\"ca-login\"},{\"name\":\"CA_ORACLE_SERVER\",\"value\":\"http://ca-oracle:4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"http://ca-notification-server:8001\"},{\"name\":\"CA_OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-webhook-ubi:606\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-webhook\",\"ports\":[{\"containerPort\":443,\"name\":\"mutating-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"600Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"100Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/cazips\",\"name\":\"zip-download\"},{\"mountPath\":\"/etc/webhook/certs\",\"name\":\"ca-cluster-certificate\",\"readOnly\":true},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"emptyDir\":{},\"name\":\"zip-download\"},{\"name\":\"ca-cluster-certificate\",\"secret\":{\"secretName\":\"ca-cluster-certificate\"}},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:46Z", - "generation": 1, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:certificate": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-webhook\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_LOGIN_SECRET_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/cazips\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/webhook/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-cluster-certificate\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"zip-download\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:16Z" - } - ], - "name": "ca-webhook", - "namespace": "cyberarmor-system", - "resourceVersion": "60787072", - "uid": "c968fe90-8480-471f-bdf1-fa98447ce1d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-webhook" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "certificate": "d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt" - }, - "creationTimestamp": null, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-tlsCertFile=/etc/webhook/certs/tls.crt", - "-tlsKeyFile=/etc/webhook/certs/tls.key", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_WEBHOOK_NAME", - "value": "ca-webhook" - }, - { - "name": "CA_WEBHOOK_PORT", - "value": "443" - }, - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_LOGIN_SECRET_NAME", - "value": "ca-login" - }, - { - "name": "CA_ORACLE_SERVER", - "value": "http://ca-oracle:4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "http://ca-notification-server:8001" - }, - { - "name": "CA_OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-webhook-ubi:606", - "imagePullPolicy": "Always", - "name": "ca-webhook", - "ports": [ - { - "containerPort": 443, - "name": "mutating-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "600Mi" - }, - "requests": { - "cpu": "300m", - "memory": "100Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/cazips", - "name": "zip-download" - }, - { - "mountPath": "/etc/webhook/certs", - "name": "ca-cluster-certificate", - "readOnly": true - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "emptyDir": {}, - "name": "zip-download" - }, - { - "name": "ca-cluster-certificate", - "secret": { - "defaultMode": 420, - "secretName": "ca-cluster-certificate" - } - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:16Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:46Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "ReplicaSet \"ca-webhook-7dd8bbd798\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-websocket\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-websocket\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_VULN_SCAN_SCHEDULE\",\"value\":\"@every 11h\"},{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\",\"value\":\"@every 12h\"},{\"name\":\"CA_DEBUG_SIGNER\",\"value\":null}],\"image\":\"quay.io/armosec/k8s-ca-websocket-ubi:406\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-websocket\",\"ports\":[{\"containerPort\":4002,\"name\":\"trigger-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:43Z", - "generation": 1, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-websocket\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_DEBUG_SIGNER\"}": { - ".": {}, - "f:name": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_VULN_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:14Z" - } - ], - "name": "ca-websocket", - "namespace": "cyberarmor-system", - "resourceVersion": "60787065", - "uid": "914f30e9-d858-4945-9314-cbd3422ebaab" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-websocket" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_VULN_SCAN_SCHEDULE", - "value": "@every 11h" - }, - { - "name": "CA_POSTURE_SCAN_SCHEDULE", - "value": "@every 12h" - }, - { - "name": "CA_DEBUG_SIGNER" - } - ], - "image": "quay.io/armosec/k8s-ca-websocket-ubi:406", - "imagePullPolicy": "Always", - "name": "ca-websocket", - "ports": [ - { - "containerPort": 4002, - "name": "trigger-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "1000Mi" - }, - "requests": { - "cpu": "300m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:14Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:43Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "ReplicaSet \"ca-websocket-857758846f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"adservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"adservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"adservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/adservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"name\":\"server\",\"ports\":[{\"containerPort\":9555}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"180Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:51Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":9555,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:12Z" - } - ], - "name": "adservice", - "namespace": "hipster", - "resourceVersion": "61263240", - "uid": "368bea36-82be-4c28-8607-cf931a836185" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "adservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6415784d-d96b-4866-9c10-d571c8d8fd35", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:29", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-adservice" - }, - "creationTimestamp": null, - "labels": { - "app": "adservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/adservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 9555, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "300Mi" - }, - "requests": { - "cpu": "200m", - "memory": "180Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:24Z", - "lastUpdateTime": "2021-10-12T00:12:24Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:51Z", - "lastUpdateTime": "2021-10-13T00:28:12Z", - "message": "ReplicaSet \"adservice-7864446d5c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"cartservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"cartservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"cartservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"REDIS_ADDR\",\"value\":\"redis-cart:6379\"}],\"image\":\"gcr.io/google-samples/microservices-demo/cartservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15,\"periodSeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":7070}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:47Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"REDIS_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7070,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T09:40:08Z" - } - ], - "name": "cartservice", - "namespace": "hipster", - "resourceVersion": "61443544", - "uid": "df767287-ffc1-4559-b7fd-32b09bf6208c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "cartservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "7ced7c5c-c483-40b3-b6bc-8829339dc3e1", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:04", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-cartservice" - }, - "creationTimestamp": null, - "labels": { - "app": "cartservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "REDIS_ADDR", - "value": "redis-cart:6379" - } - ], - "image": "gcr.io/google-samples/microservices-demo/cartservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7070, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "128Mi" - }, - "requests": { - "cpu": "200m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-13T00:27:35Z", - "message": "ReplicaSet \"cartservice-7c8f8f9ddd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T09:40:08Z", - "lastUpdateTime": "2021-10-13T09:40:08Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"checkoutservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"checkoutservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"checkoutservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"5050\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"PAYMENT_SERVICE_ADDR\",\"value\":\"paymentservice:50051\"},{\"name\":\"EMAIL_SERVICE_ADDR\",\"value\":\"emailservice:5000\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"}],\"image\":\"gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":5050}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:42Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EMAIL_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PAYMENT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":5050,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:42Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:41Z" - } - ], - "name": "checkoutservice", - "namespace": "hipster", - "resourceVersion": "61262985", - "uid": "b5e6a8d8-1ec6-4acc-bf14-e3bb28bff284" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "checkoutservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "bebad8bb-8728-4813-ae19-d22a38a289a5", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:28", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-checkoutservice" - }, - "creationTimestamp": null, - "labels": { - "app": "checkoutservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "5050" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "PAYMENT_SERVICE_ADDR", - "value": "paymentservice:50051" - }, - { - "name": "EMAIL_SERVICE_ADDR", - "value": "emailservice:5000" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - } - ], - "image": "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 5050, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T14:05:32Z", - "lastUpdateTime": "2021-10-12T14:05:32Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:42Z", - "lastUpdateTime": "2021-10-13T00:27:42Z", - "message": "ReplicaSet \"checkoutservice-86c564466c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"currencyservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"currencyservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"currencyservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"7000\"}],\"image\":\"gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":7000,\"name\":\"grpc\"}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T08:37:54Z" - } - ], - "name": "currencyservice", - "namespace": "hipster", - "resourceVersion": "61423238", - "uid": "167b75e1-1be2-4764-aaad-dbb1ae248d3c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "currencyservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "4aa34494-0348-4859-9e29-56df9baf52ba", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-currencyservice" - }, - "creationTimestamp": null, - "labels": { - "app": "currencyservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "7000" - } - ], - "image": "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7000, - "name": "grpc", - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:29:19Z", - "message": "ReplicaSet \"currencyservice-544b6d849c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T08:37:54Z", - "lastUpdateTime": "2021-10-13T08:37:54Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"emailservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"emailservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"emailservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"DISABLE_PROFILER\",\"value\":\"1\"}],\"image\":\"gcr.io/google-samples/microservices-demo/emailservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:41Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"DISABLE_PROFILER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:41Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:07Z" - } - ], - "name": "emailservice", - "namespace": "hipster", - "resourceVersion": "61263204", - "uid": "9959433f-c964-4e6d-a2d7-3d1b9b617948" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "emailservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "e8aa9826-2367-44e1-9aad-a6d617b0fa06", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:48", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-emailservice" - }, - "creationTimestamp": null, - "labels": { - "app": "emailservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "DISABLE_PROFILER", - "value": "1" - } - ], - "image": "gcr.io/google-samples/microservices-demo/emailservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-12T00:11:47Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:41Z", - "lastUpdateTime": "2021-10-13T00:28:08Z", - "message": "ReplicaSet \"emailservice-cc7c4cd87\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"frontend\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"frontend\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"frontend\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"},{\"name\":\"RECOMMENDATION_SERVICE_ADDR\",\"value\":\"recommendationservice:8080\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"CHECKOUT_SERVICE_ADDR\",\"value\":\"checkoutservice:5050\"},{\"name\":\"AD_SERVICE_ADDR\",\"value\":\"adservice:9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/frontend:v0.2.3\",\"livenessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-liveness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-readiness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:44Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AD_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CHECKOUT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"RECOMMENDATION_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:44Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:34Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:22Z" - } - ], - "name": "frontend", - "namespace": "hipster", - "resourceVersion": "61263336", - "uid": "86b92d9e-22ad-4f0a-be26-41343f05f0d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "frontend" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9611f05f-4a8b-48ff-9722-e6a2ec702d65", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:57", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-frontend", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "frontend", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - }, - { - "name": "RECOMMENDATION_SERVICE_ADDR", - "value": "recommendationservice:8080" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "CHECKOUT_SERVICE_ADDR", - "value": "checkoutservice:5050" - }, - { - "name": "AD_SERVICE_ADDR", - "value": "adservice:9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/frontend:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-liveness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-readiness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:04Z", - "lastUpdateTime": "2021-10-12T00:12:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:44Z", - "lastUpdateTime": "2021-10-13T00:28:23Z", - "message": "ReplicaSet \"frontend-c747f6f47\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"loadgenerator\",\"namespace\":\"hipster\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"loadgenerator\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"loadgenerator\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"FRONTEND_ADDR\",\"value\":\"frontend:80\"},{\"name\":\"USERS\",\"value\":\"10\"}],\"image\":\"gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3\",\"name\":\"main\",\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"256Mi\"}}}],\"restartPolicy\":\"Always\",\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"main\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"FRONTEND_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"USERS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:38Z" - } - ], - "name": "loadgenerator", - "namespace": "hipster", - "resourceVersion": "61263451", - "uid": "e9200650-d25d-43f2-b1bc-4615beaed50c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "loadgenerator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "baca3d0f-fdc8-42c6-a9b1-ee29b3d173e0", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:26", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-loadgenerator", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "loadgenerator", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "FRONTEND_ADDR", - "value": "frontend:80" - }, - { - "name": "USERS", - "value": "10" - } - ], - "image": "gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "name": "main", - "resources": { - "limits": { - "cpu": "500m", - "memory": "512Mi" - }, - "requests": { - "cpu": "300m", - "memory": "256Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-13T00:24:15Z", - "lastUpdateTime": "2021-10-13T00:24:15Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:28:38Z", - "message": "ReplicaSet \"loadgenerator-6dcb6ffc4f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"paymentservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"paymentservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"paymentservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:45Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:45Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:29:27Z" - } - ], - "name": "paymentservice", - "namespace": "hipster", - "resourceVersion": "61263785", - "uid": "ab21c30f-d153-4ea8-982e-e12a71745dae" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "paymentservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "60b5720d-99b5-47a0-8bc4-656b372a6d17", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:52", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-paymentservice" - }, - "creationTimestamp": null, - "labels": { - "app": "paymentservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:45Z", - "lastUpdateTime": "2021-10-13T00:29:27Z", - "message": "ReplicaSet \"paymentservice-849b876ffd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"productcatalogservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"productcatalogservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"productcatalogservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":3550}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:46Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":3550,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:57Z" - } - ], - "name": "productcatalogservice", - "namespace": "hipster", - "resourceVersion": "61263117", - "uid": "50b29b6e-0f97-43b8-9555-a53d9c0e18f9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "productcatalogservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9bb4cc06-3907-401b-919f-c2974a623068", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-productcatalogservice" - }, - "creationTimestamp": null, - "labels": { - "app": "productcatalogservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 3550, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:46Z", - "lastUpdateTime": "2021-10-13T00:27:57Z", - "message": "ReplicaSet \"productcatalogservice-586fd876d5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"recommendationservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"recommendationservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"recommendationservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"450Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"220Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:43Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:37Z" - } - ], - "name": "recommendationservice", - "namespace": "hipster", - "resourceVersion": "61263443", - "uid": "00437f28-24c4-4759-ab93-f0be948eabc9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "recommendationservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "8cace306-b3ce-4f2f-8a6f-b122873b4eee", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-recommendationservice" - }, - "creationTimestamp": null, - "labels": { - "app": "recommendationservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "450Mi" - }, - "requests": { - "cpu": "100m", - "memory": "220Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-12T00:11:50Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:43Z", - "lastUpdateTime": "2021-10-13T00:28:37Z", - "message": "ReplicaSet \"recommendationservice-54b7b7b95d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"redis-cart\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"redis-cart\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"redis-cart\"}},\"spec\":{\"containers\":[{\"image\":\"redis:alpine\",\"livenessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"name\":\"redis\",\"ports\":[{\"containerPort\":6379}],\"readinessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"resources\":{\"limits\":{\"cpu\":\"125m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"70m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/data\",\"name\":\"redis-data\"}]}],\"volumes\":[{\"emptyDir\":{},\"name\":\"redis-data\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:50Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"redis\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":6379,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/data\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"redis-data\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:38Z" - } - ], - "name": "redis-cart", - "namespace": "hipster", - "resourceVersion": "61262948", - "uid": "76b3aebb-9ec5-479e-81ae-975ccf1bc6ec" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "redis-cart" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "838a7c21-618b-4693-a13b-838a9231ca58", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-redis-cart" - }, - "creationTimestamp": null, - "labels": { - "app": "redis-cart", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "image": "redis:alpine", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "name": "redis", - "ports": [ - { - "containerPort": 6379, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "125m", - "memory": "256Mi" - }, - "requests": { - "cpu": "70m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/data", - "name": "redis-data" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "emptyDir": {}, - "name": "redis-data" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:57Z", - "lastUpdateTime": "2021-10-12T00:11:57Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-13T00:27:38Z", - "message": "ReplicaSet \"redis-cart-594778c8b9\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"shippingservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"shippingservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"shippingservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:49Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:49Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:11Z" - } - ], - "name": "shippingservice", - "namespace": "hipster", - "resourceVersion": "61262726", - "uid": "febd2fe5-0e28-448e-aabd-31904ebb82a9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "shippingservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6503b850-839c-4b73-95ab-195d27b3c10d", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:26:58", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-shippingservice" - }, - "creationTimestamp": null, - "labels": { - "app": "shippingservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:00Z", - "lastUpdateTime": "2021-10-12T00:12:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:49Z", - "lastUpdateTime": "2021-10-13T00:27:11Z", - "message": "ReplicaSet \"shippingservice-758c9b4d4b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":\"10%\",\"maxUnavailable\":0}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"kubedns\",\"prometheus.io/port\":\"10054\",\"prometheus.io/scrape\":\"true\",\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"labels\":{\"k8s-app\":\"kube-dns\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchExpressions\":[{\"key\":\"k8s-app\",\"operator\":\"In\",\"values\":[\"kube-dns\"]}]},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"--domain=cluster.local.\",\"--dns-port=10053\",\"--config-dir=/kube-dns-config\",\"--v=2\"],\"env\":[{\"name\":\"PROMETHEUS_PORT\",\"value\":\"10055\"}],\"image\":\"gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/kubedns\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"kubedns\",\"ports\":[{\"containerPort\":10053,\"name\":\"dns-local\",\"protocol\":\"UDP\"},{\"containerPort\":10053,\"name\":\"dns-tcp-local\",\"protocol\":\"TCP\"},{\"containerPort\":10055,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readiness\",\"port\":8081,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":3,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"memory\":\"210Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"70Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001},\"volumeMounts\":[{\"mountPath\":\"/kube-dns-config\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"-v=2\",\"-logtostderr\",\"-configDir=/etc/k8s/dns/dnsmasq-nanny\",\"-restartDnsmasq=true\",\"--\",\"-k\",\"--cache-size=1000\",\"--no-negcache\",\"--dns-forward-max=1500\",\"--log-facility=-\",\"--server=/cluster.local/127.0.0.1#10053\",\"--server=/in-addr.arpa/127.0.0.1#10053\",\"--server=/ip6.arpa/127.0.0.1#10053\"],\"image\":\"gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/dnsmasq\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"dnsmasq\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"150m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"capabilities\":{\"add\":[\"NET_BIND_SERVICE\",\"SETGID\"],\"drop\":[\"all\"]}},\"volumeMounts\":[{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"--v=2\",\"--logtostderr\",\"--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV\",\"--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV\"],\"image\":\"gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/metrics\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"sidecar\",\"ports\":[{\"containerPort\":10054,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001}}],\"dnsPolicy\":\"Default\",\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 4, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:scheduler.alpha.kubernetes.io/critical-pod": {}, - "f:seccomp.security.alpha.kubernetes.io/pod": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:podAntiAffinity": { - ".": {}, - "f:preferredDuringSchedulingIgnoredDuringExecution": {} - } - }, - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:capabilities": { - ".": {}, - "f:add": {}, - "f:drop": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"kubedns\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PROMETHEUS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10053,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10053,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10055,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/kube-dns-config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"sidecar\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10054,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - "f:image": {} - }, - "k:{\"name\":\"kubedns\"}": { - "f:image": {} - }, - "k:{\"name\":\"sidecar\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:06:26Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "53109905", - "uid": "cd5cca24-7cd2-4548-a5d3-d90beb79f9e8" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 2, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "10%", - "maxUnavailable": 0 - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "kubedns", - "prometheus.io/port": "10054", - "prometheus.io/scrape": "true", - "scheduler.alpha.kubernetes.io/critical-pod": "", - "seccomp.security.alpha.kubernetes.io/pod": "runtime/default" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns" - } - }, - "spec": { - "affinity": { - "podAntiAffinity": { - "preferredDuringSchedulingIgnoredDuringExecution": [ - { - "podAffinityTerm": { - "labelSelector": { - "matchExpressions": [ - { - "key": "k8s-app", - "operator": "In", - "values": [ - "kube-dns" - ] - } - ] - }, - "topologyKey": "kubernetes.io/hostname" - }, - "weight": 100 - } - ] - } - }, - "containers": [ - { - "args": [ - "--domain=cluster.local.", - "--dns-port=10053", - "--config-dir=/kube-dns-config", - "--v=2" - ], - "env": [ - { - "name": "PROMETHEUS_PORT", - "value": "10055" - } - ], - "image": "gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/kubedns", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "kubedns", - "ports": [ - { - "containerPort": 10053, - "name": "dns-local", - "protocol": "UDP" - }, - { - "containerPort": 10053, - "name": "dns-tcp-local", - "protocol": "TCP" - }, - { - "containerPort": 10055, - "name": "metrics", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/readiness", - "port": 8081, - "scheme": "HTTP" - }, - "initialDelaySeconds": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "resources": { - "limits": { - "memory": "210Mi" - }, - "requests": { - "cpu": "100m", - "memory": "70Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/kube-dns-config", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "-v=2", - "-logtostderr", - "-configDir=/etc/k8s/dns/dnsmasq-nanny", - "-restartDnsmasq=true", - "--", - "-k", - "--cache-size=1000", - "--no-negcache", - "--dns-forward-max=1500", - "--log-facility=-", - "--server=/cluster.local/127.0.0.1#10053", - "--server=/in-addr.arpa/127.0.0.1#10053", - "--server=/ip6.arpa/127.0.0.1#10053" - ], - "image": "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/dnsmasq", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "dnsmasq", - "ports": [ - { - "containerPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "150m", - "memory": "20Mi" - } - }, - "securityContext": { - "capabilities": { - "add": [ - "NET_BIND_SERVICE", - "SETGID" - ], - "drop": [ - "all" - ] - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/k8s/dns/dnsmasq-nanny", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "--v=2", - "--logtostderr", - "--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV", - "--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV" - ], - "image": "gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/metrics", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "sidecar", - "ports": [ - { - "containerPort": 10054, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns", - "serviceAccountName": "kube-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 2, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-09-11T01:57:38Z", - "message": "ReplicaSet \"kube-dns-59844ff879\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:06:26Z", - "lastUpdateTime": "2021-09-25T17:06:26Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 4, - "readyReplicas": 2, - "replicas": 2, - "updatedReplicas": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns-autoscaler\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns-autoscaler\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"spec\":{\"containers\":[{\"command\":[\"/cluster-proportional-autoscaler\",\"--namespace=kube-system\",\"--configmap=kube-dns-autoscaler\",\"--target=Deployment/kube-dns\",\"--default-params={\\\"linear\\\":{\\\"coresPerReplica\\\":256,\\\"nodesPerReplica\\\":16,\\\"preventSinglePointFailure\\\":true,\\\"includeUnschedulableNodes\\\":true}}\",\"--logtostderr=true\",\"--v=2\"],\"image\":\"gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0\",\"name\":\"autoscaler\",\"resources\":{\"requests\":{\"cpu\":\"20m\",\"memory\":\"10Mi\"}}}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"seccompProfile\":{\"type\":\"RuntimeDefault\"},\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns-autoscaler\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns-autoscaler", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"autoscaler\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:02:52Z" - } - ], - "name": "kube-dns-autoscaler", - "namespace": "kube-system", - "resourceVersion": "53108562", - "uid": "c84ce079-f3c8-46ba-871f-0f2d42ffee1e" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/cluster-proportional-autoscaler", - "--namespace=kube-system", - "--configmap=kube-dns-autoscaler", - "--target=Deployment/kube-dns", - "--default-params={\"linear\":{\"coresPerReplica\":256,\"nodesPerReplica\":16,\"preventSinglePointFailure\":true,\"includeUnschedulableNodes\":true}}", - "--logtostderr=true", - "--v=2" - ], - "image": "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "autoscaler", - "resources": { - "requests": { - "cpu": "20m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "seccompProfile": { - "type": "RuntimeDefault" - }, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns-autoscaler", - "serviceAccountName": "kube-dns-autoscaler", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:54:39Z", - "message": "ReplicaSet \"kube-dns-autoscaler-844c9d9448\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:02:52Z", - "lastUpdateTime": "2021-09-25T17:02:52Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"glbc\",\"kubernetes.io/cluster-service\":\"true\",\"kubernetes.io/name\":\"GLBC\"},\"name\":\"l7-default-backend\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"glbc\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"glbc\",\"name\":\"glbc\"}},\"spec\":{\"containers\":[{\"image\":\"k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":30,\"timeoutSeconds\":5},\"name\":\"default-http-backend\",\"ports\":[{\"containerPort\":8080}],\"resources\":{\"limits\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}}}],\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"tolerations\":[{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "glbc", - "kubernetes.io/cluster-service": "true", - "kubernetes.io/name": "GLBC" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:kubernetes.io/name": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:name": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"default-http-backend\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:seccompProfile": { - "f:type": {} - } - }, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:01:20Z" - } - ], - "name": "l7-default-backend", - "namespace": "kube-system", - "resourceVersion": "53107969", - "uid": "32a76c03-37a1-44e9-b293-dd6b46ed274b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "glbc" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "glbc", - "name": "glbc" - } - }, - "spec": { - "containers": [ - { - "image": "k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 30, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "default-http-backend", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "10m", - "memory": "20Mi" - }, - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:56:25Z", - "message": "ReplicaSet \"l7-default-backend-56cb9644f6\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:01:20Z", - "lastUpdateTime": "2021-09-25T17:01:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "24", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metrics-server\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server-v0.3.6\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server\"},\"spec\":{\"containers\":[{\"command\":[\"/metrics-server\",\"--metric-resolution=30s\",\"--kubelet-port=10255\",\"--deprecated-kubelet-completely-insecure=true\",\"--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP\"],\"image\":\"k8s.gcr.io/metrics-server-amd64:v0.3.6\",\"name\":\"metrics-server\",\"ports\":[{\"containerPort\":443,\"name\":\"https\",\"protocol\":\"TCP\"}]},{\"command\":[\"/pod_nanny\",\"--config-dir=/etc/config\",\"--cpu=40m\",\"--extra-cpu=0.5m\",\"--memory=35Mi\",\"--extra-memory=4Mi\",\"--threshold=5\",\"--deployment=metrics-server-v0.3.6\",\"--container=metrics-server\",\"--poll-period=300000\",\"--estimator=exponential\",\"--scale-down-delay=24h\",\"--minClusterSize=5\",\"--use-metrics=true\"],\"env\":[{\"name\":\"MY_POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"MY_POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"gke.gcr.io/addon-resizer:1.8.11-gke.0\",\"name\":\"metrics-server-nanny\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"5m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"metrics-server-config-volume\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"metrics-server\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"metrics-server-config\"},\"name\":\"metrics-server-config-volume\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 24, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metrics-server", - "kubernetes.io/cluster-service": "true", - "version": "v0.3.6" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:version": {} - }, - "f:name": {} - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - }, - "k:{\"name\":\"metrics-server-nanny\"}": { - ".": {}, - "f:command": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"MY_POD_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"MY_POD_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"metrics-server-config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - "f:resources": { - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - } - } - } - } - } - } - }, - "manager": "pod_nanny", - "operation": "Update", - "time": "2021-06-13T13:42:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-26T17:13:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-26T17:13:52Z" - } - ], - "name": "metrics-server-v0.3.6", - "namespace": "kube-system", - "resourceVersion": "53582788", - "uid": "872d0f34-7998-45d3-9eea-570e0a47e03c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - }, - "name": "metrics-server" - }, - "spec": { - "containers": [ - { - "command": [ - "/metrics-server", - "--metric-resolution=30s", - "--kubelet-port=10255", - "--deprecated-kubelet-completely-insecure=true", - "--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP" - ], - "image": "k8s.gcr.io/metrics-server-amd64:v0.3.6", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server", - "ports": [ - { - "containerPort": 443, - "name": "https", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "44m", - "memory": "63Mi" - }, - "requests": { - "cpu": "44m", - "memory": "63Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - }, - { - "command": [ - "/pod_nanny", - "--config-dir=/etc/config", - "--cpu=40m", - "--extra-cpu=0.5m", - "--memory=35Mi", - "--extra-memory=4Mi", - "--threshold=5", - "--deployment=metrics-server-v0.3.6", - "--container=metrics-server", - "--poll-period=300000", - "--estimator=exponential", - "--scale-down-delay=24h", - "--minClusterSize=5", - "--use-metrics=true" - ], - "env": [ - { - "name": "MY_POD_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.name" - } - } - }, - { - "name": "MY_POD_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - } - ], - "image": "gke.gcr.io/addon-resizer:1.8.11-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server-nanny", - "resources": { - "limits": { - "cpu": "100m", - "memory": "300Mi" - }, - "requests": { - "cpu": "5m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "metrics-server-config-volume" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "serviceAccount": "metrics-server", - "serviceAccountName": "metrics-server", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "metrics-server-config" - }, - "name": "metrics-server-config-volume" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-09-25T17:12:33Z", - "lastUpdateTime": "2021-09-25T17:12:33Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-06-13T13:42:20Z", - "lastUpdateTime": "2021-09-26T17:13:52Z", - "message": "ReplicaSet \"metrics-server-v0.3.6-7889654bbb\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 24, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "6", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-proxy\"},\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-proxy\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-proxy\"}},\"spec\":{\"containers\":[{\"command\":[\"/bin/sh\",\"-c\",\"kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\\u003e\\u003e/var/log/kube-proxy.log 2\\u003e\\u00261\"],\"env\":[{\"name\":\"KUBERNETES_SERVICE_HOST\",\"value\":\"34.78.97.243\"}],\"image\":\"gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001\",\"name\":\"kube-proxy\",\"resources\":{\"requests\":{\"cpu\":\"100m\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/log\",\"name\":\"varlog\",\"readOnly\":false},{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/lib/modules\",\"name\":\"lib-modules\",\"readOnly\":true}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\",\"node.kubernetes.io/kube-proxy-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"kube-proxy\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/log\"},\"name\":\"varlog\"},{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"hostPath\":{\"path\":\"/lib/modules\"},\"name\":\"lib-modules\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "generation": 6, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-proxy" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBERNETES_SERVICE_HOST\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/kube-proxy-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - "f:command": {}, - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:44Z" - } - ], - "name": "kube-proxy", - "namespace": "kube-system", - "resourceVersion": "52161714", - "uid": "bb6f9ab0-e586-407b-95c0-773637c696e8" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-proxy" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-proxy" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "env": [ - { - "name": "KUBERNETES_SERVICE_HOST", - "value": "34.78.97.243" - } - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux", - "node.kubernetes.io/kube-proxy-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "kube-proxy", - "serviceAccountName": "kube-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 6 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"},\"name\":\"metadata-proxy-v0.1\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metadata-proxy\",\"version\":\"v0.1\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"}},\"spec\":{\"containers\":[{\"args\":[\"--addr=0.0.0.0:988\"],\"image\":\"k8s.gcr.io/metadata-proxy:v0.1.12\",\"name\":\"metadata-proxy\",\"resources\":{\"limits\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"},\"requests\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"}},\"securityContext\":{\"privileged\":true}}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"cloud.google.com/metadata-proxy-ready\":\"true\",\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"metadata-proxy\",\"terminationGracePeriodSeconds\":30,\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 3, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:cloud.google.com/metadata-proxy-ready": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - "f:args": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - } - ], - "name": "metadata-proxy-v0.1", - "namespace": "kube-system", - "resourceVersion": "25934435", - "uid": "94bf5845-f77b-47d4-bcec-e78549b4d8a3" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metadata-proxy", - "version": "v0.1" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--addr=0.0.0.0:988" - ], - "image": "k8s.gcr.io/metadata-proxy:v0.1.12", - "imagePullPolicy": "IfNotPresent", - "name": "metadata-proxy", - "resources": { - "limits": { - "cpu": "30m", - "memory": "25Mi" - }, - "requests": { - "cpu": "30m", - "memory": "25Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "cloud.google.com/metadata-proxy-ready": "true", - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "metadata-proxy", - "serviceAccountName": "metadata-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 3 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"node-local-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"node-local-dns\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"nodelocaldns\",\"components.gke.io/component-version\":\"1.4.0\",\"prometheus.io/port\":\"9253\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"k8s-app\":\"node-local-dns\"}},\"spec\":{\"containers\":[{\"args\":[\"-localip\",\"169.254.20.10,10.72.0.10\",\"-conf\",\"/etc/Corefile\",\"-upstreamsvc\",\"kube-dns-upstream\",\"-kubednscm\",\"/etc/kube-dns\"],\"image\":\"gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1\",\"livenessProbe\":{\"httpGet\":{\"host\":\"169.254.20.10\",\"path\":\"/health\",\"port\":8080},\"initialDelaySeconds\":60,\"timeoutSeconds\":5},\"name\":\"node-cache\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"},{\"containerPort\":9253,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"25m\",\"memory\":\"5Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/etc/coredns\",\"name\":\"config-volume\"},{\"mountPath\":\"/etc/kube-dns\",\"name\":\"kube-dns-config\"}]}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"addon.gke.io/node-local-dns-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"node-local-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"},{\"configMap\":{\"items\":[{\"key\":\"Corefile\",\"path\":\"Corefile.base\"}],\"name\":\"node-local-dns\"},\"name\":\"config-volume\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"}}}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "node-local-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:host": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":9253,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/coredns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/kube-dns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:addon.gke.io/node-local-dns-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "53114241", - "uid": "5069e9ba-0784-41bf-9577-3757bcb3b6d6" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "node-local-dns" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "nodelocaldns", - "components.gke.io/component-version": "1.4.0", - "prometheus.io/port": "9253", - "prometheus.io/scrape": "true" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "node-local-dns" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-localip", - "169.254.20.10,10.72.0.10", - "-conf", - "/etc/Corefile", - "-upstreamsvc", - "kube-dns-upstream", - "-kubednscm", - "/etc/kube-dns" - ], - "image": "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "host": "169.254.20.10", - "path": "/health", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "node-cache", - "ports": [ - { - "containerPort": 53, - "hostPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "hostPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - }, - { - "containerPort": 9253, - "hostPort": 9253, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "25m", - "memory": "5Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/etc/coredns", - "name": "config-volume" - }, - { - "mountPath": "/etc/kube-dns", - "name": "kube-dns-config" - } - ] - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "addon.gke.io/node-local-dns-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "node-local-dns", - "serviceAccountName": "node-local-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "Corefile", - "path": "Corefile.base" - } - ], - "name": "node-local-dns" - }, - "name": "config-volume" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 2, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"nvidia-gpu-device-plugin\"},\"name\":\"nvidia-gpu-device-plugin\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"cloud.google.com/gke-accelerator\",\"operator\":\"Exists\"}]}]}}},\"containers\":[{\"command\":[\"/usr/bin/nvidia-gpu-device-plugin\",\"-logtostderr\",\"--enable-container-gpu-metrics\",\"--enable-health-monitoring\"],\"env\":[{\"name\":\"LD_LIBRARY_PATH\",\"value\":\"/usr/local/nvidia/lib64\"}],\"image\":\"gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317\",\"name\":\"nvidia-gpu-device-plugin\",\"ports\":[{\"containerPort\":2112,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/device-plugin\",\"name\":\"device-plugin\"},{\"mountPath\":\"/dev\",\"name\":\"dev\"},{\"mountPath\":\"/usr/local/nvidia\",\"name\":\"nvidia\"},{\"mountPath\":\"/var/lib/kubelet/pod-resources\",\"name\":\"pod-resources\"},{\"mountPath\":\"/proc\",\"name\":\"proc\"},{\"mountPath\":\"/etc/nvidia\",\"name\":\"nvidia-config\"}]}],\"priorityClassName\":\"system-node-critical\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/device-plugins\"},\"name\":\"device-plugin\"},{\"hostPath\":{\"path\":\"/dev\"},\"name\":\"dev\"},{\"hostPath\":{\"path\":\"/home/kubernetes/bin/nvidia\",\"type\":\"Directory\"},\"name\":\"nvidia\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/pod-resources\"},\"name\":\"pod-resources\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"proc\"},{\"hostPath\":{\"path\":\"/etc/nvidia\"},\"name\":\"nvidia-config\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:17Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "nvidia-gpu-device-plugin" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:nodeAffinity": { - ".": {}, - "f:requiredDuringSchedulingIgnoredDuringExecution": { - ".": {}, - "f:nodeSelectorTerms": {} - } - } - }, - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"LD_LIBRARY_PATH\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":2112,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/device-plugin\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/local/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet/pod-resources\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"dev\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"device-plugin\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"nvidia\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"pod-resources\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - "f:command": {}, - "f:image": {}, - "f:volumeMounts": { - "k:{\"mountPath\":\"/etc/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/proc\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:volumes": { - "k:{\"name\":\"nvidia-config\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"proc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "nvidia-gpu-device-plugin", - "namespace": "kube-system", - "resourceVersion": "25934477", - "uid": "14396a20-ecee-4671-aefe-2a5b9d2e0dde" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "spec": { - "affinity": { - "nodeAffinity": { - "requiredDuringSchedulingIgnoredDuringExecution": { - "nodeSelectorTerms": [ - { - "matchExpressions": [ - { - "key": "cloud.google.com/gke-accelerator", - "operator": "Exists" - } - ] - } - ] - } - } - }, - "containers": [ - { - "command": [ - "/usr/bin/nvidia-gpu-device-plugin", - "-logtostderr", - "--enable-container-gpu-metrics", - "--enable-health-monitoring" - ], - "env": [ - { - "name": "LD_LIBRARY_PATH", - "value": "/usr/local/nvidia/lib64" - } - ], - "image": "gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317", - "imagePullPolicy": "IfNotPresent", - "name": "nvidia-gpu-device-plugin", - "ports": [ - { - "containerPort": 2112, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "20Mi" - }, - "requests": { - "cpu": "50m", - "memory": "20Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/device-plugin", - "name": "device-plugin" - }, - { - "mountPath": "/dev", - "name": "dev" - }, - { - "mountPath": "/usr/local/nvidia", - "name": "nvidia" - }, - { - "mountPath": "/var/lib/kubelet/pod-resources", - "name": "pod-resources" - }, - { - "mountPath": "/proc", - "name": "proc" - }, - { - "mountPath": "/etc/nvidia", - "name": "nvidia-config" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/device-plugins", - "type": "" - }, - "name": "device-plugin" - }, - { - "hostPath": { - "path": "/dev", - "type": "" - }, - "name": "dev" - }, - { - "hostPath": { - "path": "/home/kubernetes/bin/nvidia", - "type": "Directory" - }, - "name": "nvidia" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/pod-resources", - "type": "" - }, - "name": "pod-resources" - }, - { - "hostPath": { - "path": "/proc", - "type": "" - }, - "name": "proc" - }, - { - "hostPath": { - "path": "/etc/nvidia", - "type": "" - }, - "name": "nvidia-config" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:02:45.009201226Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:02:48Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"6de798cc-d558-479a-8ef4-38363e434633\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.63\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:02:55Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-5naq", - "uid": "6de798cc-d558-479a-8ef4-38363e434633" - } - ], - "resourceVersion": "53108585", - "uid": "fdd66d80-d09d-4b43-a291-b3797c7a5864" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-5naq", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://50767376b8a42b7a390e84c5c451d1485b1a562873b915100dc605bbcc49c1c5", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:02:48Z" - } - } - } - ], - "hostIP": "10.132.0.63", - "phase": "Running", - "podIP": "10.132.0.63", - "podIPs": [ - { - "ip": "10.132.0.63" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:02:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:09:05.595580038Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:09:09Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"d288c56c-2a00-42fe-b2ea-b8761fec2a4e\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.193\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:09:16Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-abj3", - "uid": "d288c56c-2a00-42fe-b2ea-b8761fec2a4e" - } - ], - "resourceVersion": "53110982", - "uid": "0866b060-d7a6-40bc-9ed9-292fbce958e9" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-abj3", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b04121a3de085254493b48dbe1be551abd021877d1c098afbd19e6429df8f4ba", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:09:08Z" - } - } - } - ], - "hostIP": "10.132.15.193", - "phase": "Running", - "podIP": "10.132.15.193", - "podIPs": [ - { - "ip": "10.132.15.193" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:09:06Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:56:27.195784979Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:56:29Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"9aa58d78-0147-4564-9900-0409a6bec341\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.61\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:56:37Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-enr8", - "uid": "9aa58d78-0147-4564-9900-0409a6bec341" - } - ], - "resourceVersion": "53106105", - "uid": "b940e7b5-9e7f-4ac7-a3ee-6c6655c1e65a" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-enr8", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b9375aed4bc463ecfa5fcfb0cfb3b55d087416bfe0c3267c1395e8f93569d03c", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:56:29Z" - } - } - } - ], - "hostIP": "10.132.0.61", - "phase": "Running", - "podIP": "10.132.0.61", - "podIPs": [ - { - "ip": "10.132.0.61" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:56:28Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:59:41.285621877Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:59:44Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"c1ab3c15-9764-40f5-ba6b-82556dc98ea2\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.62\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:59:52Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-oq2w", - "uid": "c1ab3c15-9764-40f5-ba6b-82556dc98ea2" - } - ], - "resourceVersion": "53107378", - "uid": "19e52dea-6339-4ed7-8e32-3d39b242d133" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-oq2w", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://a0b27bef16953a38c48075124547583280bccf28d1d6cf54c3b3e754e2847c86", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:59:44Z" - } - } - } - ], - "hostIP": "10.132.0.62", - "phase": "Running", - "podIP": "10.132.0.62", - "podIPs": [ - { - "ip": "10.132.0.62" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:59:42Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:12:12.095932889Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:12:15Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"7042c0e8-8dc5-4d1d-8b36-92c692c31c76\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.194\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:12:22Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-rgdp", - "uid": "7042c0e8-8dc5-4d1d-8b36-92c692c31c76" - } - ], - "resourceVersion": "53112149", - "uid": "5248c280-7bde-4fe9-a74e-56ae25abb0d2" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-rgdp", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://fd91ae480585a78c59ef401dc852d58921e76693ecbd908d98e4b63da6c298ff", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:12:14Z" - } - } - } - ], - "hostIP": "10.132.15.194", - "phase": "Running", - "podIP": "10.132.15.194", - "podIPs": [ - { - "ip": "10.132.15.194" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:12:13Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:05:45.558688986Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:05:49Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"a58f61e7-9d9e-4266-90d4-16b9969cb373\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.192\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:05:56Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-x940", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-x940", - "uid": "a58f61e7-9d9e-4266-90d4-16b9969cb373" - } - ], - "resourceVersion": "53109692", - "uid": "71a05734-f741-4b7e-82fe-765c555b3607" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-x940", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://6abab671623159f7174321118f58600f8955267a139a72508e9a73631ef7920d", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:05:48Z" - } - } - } - ], - "hostIP": "10.132.15.192", - "phase": "Running", - "podIP": "10.132.15.192", - "podIPs": [ - { - "ip": "10.132.15.192" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:05:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:15:06.466708143Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:15:10Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"65f37105-dd71-428b-bf8b-0e82b88027f1\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.195\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:15:17Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-zzyg", - "uid": "65f37105-dd71-428b-bf8b-0e82b88027f1" - } - ], - "resourceVersion": "53113200", - "uid": "dac23622-ae54-4a1a-a6ca-3c020911966e" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-zzyg", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://ee309dad5cb7047fcbd7eb0401760ccb4bd986080ab11c860911e37b132a2a5c", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:15:09Z" - } - } - } - ], - "hostIP": "10.132.15.195", - "phase": "Running", - "podIP": "10.132.15.195", - "podIPs": [ - { - "ip": "10.132.15.195" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:15:07Z" - } - } - ], - "listInputKinds": null - } - ], - "remediation": "Set the insecure-port flag of the API server to zero.", - "description": "Kubernetes control plane API is running with non-secure port enabled which allows attackers to gain unprotected access to the cluster.", - "score": 100 - }, - { - "guid": "", - "attributes": { - "armoBuiltin": true - }, - "id": "C-0038", - "controlID": "C-0038", - "name": "Host PID/IPC privileges", - "ruleReports": [ - { - "name": "host-pid-ipc-privileges", - "remediation": "", - "ruleStatus": { - "status": "success", - "message": "" - }, - "ruleResponses": null, - "listInputResources": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-audit\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-audit\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CONFIG_FILES\",\"value\":\"/config/config.json\"},{\"name\":\"CA_SERVER_TYPE\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"cluster_kind\",\"name\":\"ca-audit\"}}}],\"image\":\"quay.io/armosec/k8s-ca-auditlog-ubi:21\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-audit\",\"ports\":[{\"containerPort\":443,\"name\":\"ca-audit-port\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/config\",\"name\":\"ca-audit\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-audit\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"config\",\"path\":\"config.json\"}],\"name\":\"ca-audit\"},\"name\":\"ca-audit\"},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:54Z", - "generation": 1, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CONFIG_FILES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_SERVER_TYPE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:54Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-audit", - "namespace": "cyberarmor-system", - "resourceVersion": "60787209", - "uid": "687f52ea-6956-4e8a-bb8c-7ea35a04b3f0" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-audit" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CONFIG_FILES", - "value": "/config/config.json" - }, - { - "name": "CA_SERVER_TYPE", - "valueFrom": { - "configMapKeyRef": { - "key": "cluster_kind", - "name": "ca-audit" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-auditlog-ubi:21", - "imagePullPolicy": "Always", - "name": "ca-audit", - "ports": [ - { - "containerPort": 443, - "name": "ca-audit-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/config", - "name": "ca-audit", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-audit", - "serviceAccountName": "ca-audit", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "config", - "path": "config.json" - } - ], - "name": "ca-audit" - }, - "name": "ca-audit" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:54Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-audit-c667df747\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-dashboard-aggregator\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-dashboard-aggregator\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-configtype=1\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-dashboard-aggregator\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"40Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:55Z", - "generation": 1, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-dashboard-aggregator\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:55Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T23:55:20Z" - } - ], - "name": "ca-dashboard-aggregator", - "namespace": "cyberarmor-system", - "resourceVersion": "61250607", - "uid": "0ba23569-e254-4388-b22f-30cc1eca031b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-dashboard-aggregator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-configtype=1", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173", - "imagePullPolicy": "Always", - "name": "ca-dashboard-aggregator", - "resources": { - "limits": { - "cpu": "200m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "40Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:18:55Z", - "lastUpdateTime": "2021-10-12T00:19:19Z", - "message": "ReplicaSet \"ca-dashboard-aggregator-5b8bdbc8f5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-12T23:55:20Z", - "lastUpdateTime": "2021-10-12T23:55:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-notification-server\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-notification-server\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"maserNotificationServer\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\",\"value\":\"customerGUID\"},{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\",\"value\":\"8001\"},{\"name\":\"CA_NOTIFICATION_SERVER_PORT\",\"value\":\"8002\"}],\"image\":\"quay.io/armosec/notification-server-ubi:89\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-notification-server\",\"ports\":[{\"containerPort\":8001,\"name\":\"websocket\"},{\"containerPort\":8002,\"name\":\"rest-api\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:59Z", - "generation": 1, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-notification-server\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8001,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:59Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:11Z" - } - ], - "name": "ca-notification-server", - "namespace": "cyberarmor-system", - "resourceVersion": "60787036", - "uid": "8c3dc6fe-e730-4364-8445-dc5a05ad2b0f" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-notification-server" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_HOST", - "valueFrom": { - "configMapKeyRef": { - "key": "maserNotificationServer", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_ATTRIBUTES", - "value": "customerGUID" - }, - { - "name": "CA_NOTIFICATION_SERVER_WS_PORT", - "value": "8001" - }, - { - "name": "CA_NOTIFICATION_SERVER_PORT", - "value": "8002" - } - ], - "image": "quay.io/armosec/notification-server-ubi:89", - "imagePullPolicy": "Always", - "name": "ca-notification-server", - "ports": [ - { - "containerPort": 8001, - "name": "websocket", - "protocol": "TCP" - }, - { - "containerPort": 8002, - "name": "rest-api", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "50Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:11Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:59Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "ReplicaSet \"ca-notification-server-6fd966c875\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-ocimage\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-ocimage\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-ocimage:63\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-ocimage\",\"ports\":[{\"containerPort\":8080,\"name\":\"ca-ocimage-port\"}],\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:51Z", - "generation": 1, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-ocimage\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:04Z" - } - ], - "name": "ca-ocimage", - "namespace": "cyberarmor-system", - "resourceVersion": "60786986", - "uid": "a6d37edf-b144-4677-91b3-73c73d9c7df6" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-ocimage" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-ocimage:63", - "imagePullPolicy": "Always", - "name": "ca-ocimage", - "ports": [ - { - "containerPort": 8080, - "name": "ca-ocimage-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "1", - "memory": "1000Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:04Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:51Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "ReplicaSet \"ca-ocimage-5576ff7d7d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-oracle\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-oracle\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_ORACLE_PORT\",\"value\":\"4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8002\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-oracle-ubi:11\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-oracle\",\"ports\":[{\"containerPort\":4000,\"name\":\"ca-oracle\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:19:01Z", - "generation": 1, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-oracle\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:19:01Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-oracle", - "namespace": "cyberarmor-system", - "resourceVersion": "60787203", - "uid": "da3dd21c-bf13-4d2a-97da-ca80b94d08d3" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-oracle" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_ORACLE_PORT", - "value": "4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8002" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-oracle-ubi:11", - "imagePullPolicy": "Always", - "name": "ca-oracle", - "ports": [ - { - "containerPort": 4000, - "name": "ca-oracle", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:19:01Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-oracle-6c98c6bdbf\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-posture\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-posture\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8001\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-posture-ubi:112\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-posture\",\"ports\":[{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/resources/config\",\"name\":\"ca-posture-score-config\",\"readOnly\":false},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"},{\"configMap\":{\"items\":[{\"key\":\"resourcesdict.json\",\"path\":\"resourcesdict.json\"},{\"key\":\"frameworkdict.json\",\"path\":\"frameworkdict.json\"}],\"name\":\"ca-posture-score-config\"},\"name\":\"ca-posture-score-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:58Z", - "generation": 1, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-posture\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/resources/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-posture-score-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:58Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:45Z" - } - ], - "name": "ca-posture", - "namespace": "cyberarmor-system", - "resourceVersion": "60787259", - "uid": "f41f4dc1-cfb0-4201-bca7-f1cf0b72b6b7" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-posture" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8001" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-posture-ubi:112", - "imagePullPolicy": "Always", - "name": "ca-posture", - "ports": [ - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "500m", - "memory": "100Mi" - }, - "requests": { - "cpu": "100m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/resources/config", - "name": "ca-posture-score-config" - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "resourcesdict.json", - "path": "resourcesdict.json" - }, - { - "key": "frameworkdict.json", - "path": "frameworkdict.json" - } - ], - "name": "ca-posture-score-config" - }, - "name": "ca-posture-score-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:45Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:58Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "ReplicaSet \"ca-posture-5996968d7b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-rbac\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-rbac\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"S3_BUCKET\",\"value\":\"ca-kubernetes-rbac-db-dev\"},{\"name\":\"AWS_REGION\",\"value\":\"eu-west-1\"},{\"name\":\"AWS_ACCESS_KEY_ID\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keyid\",\"name\":\"ca-rbac\"}}},{\"name\":\"AWS_SECRET_ACCESS_KEY\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keysecret\",\"name\":\"ca-rbac\"}}}],\"image\":\"quay.io/armosec/k8s-ca-rbac-scanner-ubi:20\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-rbac\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"400Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:50Z", - "generation": 1, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-rbac\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AWS_ACCESS_KEY_ID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"AWS_REGION\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"AWS_SECRET_ACCESS_KEY\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"S3_BUCKET\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:13Z" - } - ], - "name": "ca-rbac", - "namespace": "cyberarmor-system", - "resourceVersion": "60787051", - "uid": "d5898a09-2489-4254-b210-0725ddb2427a" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-rbac" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "S3_BUCKET", - "value": "ca-kubernetes-rbac-db-dev" - }, - { - "name": "AWS_REGION", - "value": "eu-west-1" - }, - { - "name": "AWS_ACCESS_KEY_ID", - "valueFrom": { - "secretKeyRef": { - "key": "keyid", - "name": "ca-rbac" - } - } - }, - { - "name": "AWS_SECRET_ACCESS_KEY", - "valueFrom": { - "secretKeyRef": { - "key": "keysecret", - "name": "ca-rbac" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-rbac-scanner-ubi:20", - "imagePullPolicy": "Always", - "name": "ca-rbac", - "resources": { - "limits": { - "cpu": "200m", - "memory": "400Mi" - }, - "requests": { - "cpu": "10m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:13Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:50Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "ReplicaSet \"ca-rbac-75c8cfd6b4\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-vuln-scan\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-vuln-scan\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"EVENT_RECEIVER_URL\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\",\"value\":\"4\"}],\"image\":\"quay.io/armosec/k8s-ca-vuln-scan-ubi:84\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-vuln-scan\",\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1.5Gi\"},\"requests\":{\"cpu\":\"500m\",\"memory\":\"1Gi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:47Z", - "generation": 1, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-vuln-scan\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EVENT_RECEIVER_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:00Z" - } - ], - "name": "ca-vuln-scan", - "namespace": "cyberarmor-system", - "resourceVersion": "60786938", - "uid": "9ea3d6cb-c6c0-423f-aab2-630827939285" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-vuln-scan" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "EVENT_RECEIVER_URL", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_MAX_VULN_SCAN_ROUTINS", - "value": "4" - } - ], - "image": "quay.io/armosec/k8s-ca-vuln-scan-ubi:84", - "imagePullPolicy": "Always", - "name": "ca-vuln-scan", - "resources": { - "limits": { - "cpu": "1", - "memory": "1536Mi" - }, - "requests": { - "cpu": "500m", - "memory": "1Gi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:00Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:47Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "ReplicaSet \"ca-vuln-scan-75b499df8c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-webhook\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-webhook\"}},\"template\":{\"metadata\":{\"annotations\":{\"certificate\":\"d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt\"},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-tlsCertFile=/etc/webhook/certs/tls.crt\",\"-tlsKeyFile=/etc/webhook/certs/tls.key\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_WEBHOOK_NAME\",\"value\":\"ca-webhook\"},{\"name\":\"CA_WEBHOOK_PORT\",\"value\":\"443\"},{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_LOGIN_SECRET_NAME\",\"value\":\"ca-login\"},{\"name\":\"CA_ORACLE_SERVER\",\"value\":\"http://ca-oracle:4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"http://ca-notification-server:8001\"},{\"name\":\"CA_OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-webhook-ubi:606\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-webhook\",\"ports\":[{\"containerPort\":443,\"name\":\"mutating-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"600Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"100Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/cazips\",\"name\":\"zip-download\"},{\"mountPath\":\"/etc/webhook/certs\",\"name\":\"ca-cluster-certificate\",\"readOnly\":true},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"emptyDir\":{},\"name\":\"zip-download\"},{\"name\":\"ca-cluster-certificate\",\"secret\":{\"secretName\":\"ca-cluster-certificate\"}},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:46Z", - "generation": 1, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:certificate": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-webhook\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_LOGIN_SECRET_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/cazips\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/webhook/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-cluster-certificate\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"zip-download\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:16Z" - } - ], - "name": "ca-webhook", - "namespace": "cyberarmor-system", - "resourceVersion": "60787072", - "uid": "c968fe90-8480-471f-bdf1-fa98447ce1d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-webhook" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "certificate": "d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt" - }, - "creationTimestamp": null, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-tlsCertFile=/etc/webhook/certs/tls.crt", - "-tlsKeyFile=/etc/webhook/certs/tls.key", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_WEBHOOK_NAME", - "value": "ca-webhook" - }, - { - "name": "CA_WEBHOOK_PORT", - "value": "443" - }, - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_LOGIN_SECRET_NAME", - "value": "ca-login" - }, - { - "name": "CA_ORACLE_SERVER", - "value": "http://ca-oracle:4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "http://ca-notification-server:8001" - }, - { - "name": "CA_OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-webhook-ubi:606", - "imagePullPolicy": "Always", - "name": "ca-webhook", - "ports": [ - { - "containerPort": 443, - "name": "mutating-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "600Mi" - }, - "requests": { - "cpu": "300m", - "memory": "100Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/cazips", - "name": "zip-download" - }, - { - "mountPath": "/etc/webhook/certs", - "name": "ca-cluster-certificate", - "readOnly": true - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "emptyDir": {}, - "name": "zip-download" - }, - { - "name": "ca-cluster-certificate", - "secret": { - "defaultMode": 420, - "secretName": "ca-cluster-certificate" - } - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:16Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:46Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "ReplicaSet \"ca-webhook-7dd8bbd798\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-websocket\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-websocket\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_VULN_SCAN_SCHEDULE\",\"value\":\"@every 11h\"},{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\",\"value\":\"@every 12h\"},{\"name\":\"CA_DEBUG_SIGNER\",\"value\":null}],\"image\":\"quay.io/armosec/k8s-ca-websocket-ubi:406\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-websocket\",\"ports\":[{\"containerPort\":4002,\"name\":\"trigger-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:43Z", - "generation": 1, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-websocket\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_DEBUG_SIGNER\"}": { - ".": {}, - "f:name": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_VULN_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:14Z" - } - ], - "name": "ca-websocket", - "namespace": "cyberarmor-system", - "resourceVersion": "60787065", - "uid": "914f30e9-d858-4945-9314-cbd3422ebaab" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-websocket" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_VULN_SCAN_SCHEDULE", - "value": "@every 11h" - }, - { - "name": "CA_POSTURE_SCAN_SCHEDULE", - "value": "@every 12h" - }, - { - "name": "CA_DEBUG_SIGNER" - } - ], - "image": "quay.io/armosec/k8s-ca-websocket-ubi:406", - "imagePullPolicy": "Always", - "name": "ca-websocket", - "ports": [ - { - "containerPort": 4002, - "name": "trigger-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "1000Mi" - }, - "requests": { - "cpu": "300m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:14Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:43Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "ReplicaSet \"ca-websocket-857758846f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"adservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"adservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"adservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/adservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"name\":\"server\",\"ports\":[{\"containerPort\":9555}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"180Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:51Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":9555,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:12Z" - } - ], - "name": "adservice", - "namespace": "hipster", - "resourceVersion": "61263240", - "uid": "368bea36-82be-4c28-8607-cf931a836185" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "adservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6415784d-d96b-4866-9c10-d571c8d8fd35", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:29", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-adservice" - }, - "creationTimestamp": null, - "labels": { - "app": "adservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/adservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 9555, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "300Mi" - }, - "requests": { - "cpu": "200m", - "memory": "180Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:24Z", - "lastUpdateTime": "2021-10-12T00:12:24Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:51Z", - "lastUpdateTime": "2021-10-13T00:28:12Z", - "message": "ReplicaSet \"adservice-7864446d5c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"cartservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"cartservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"cartservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"REDIS_ADDR\",\"value\":\"redis-cart:6379\"}],\"image\":\"gcr.io/google-samples/microservices-demo/cartservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15,\"periodSeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":7070}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:47Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"REDIS_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7070,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T09:40:08Z" - } - ], - "name": "cartservice", - "namespace": "hipster", - "resourceVersion": "61443544", - "uid": "df767287-ffc1-4559-b7fd-32b09bf6208c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "cartservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "7ced7c5c-c483-40b3-b6bc-8829339dc3e1", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:04", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-cartservice" - }, - "creationTimestamp": null, - "labels": { - "app": "cartservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "REDIS_ADDR", - "value": "redis-cart:6379" - } - ], - "image": "gcr.io/google-samples/microservices-demo/cartservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7070, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "128Mi" - }, - "requests": { - "cpu": "200m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-13T00:27:35Z", - "message": "ReplicaSet \"cartservice-7c8f8f9ddd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T09:40:08Z", - "lastUpdateTime": "2021-10-13T09:40:08Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"checkoutservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"checkoutservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"checkoutservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"5050\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"PAYMENT_SERVICE_ADDR\",\"value\":\"paymentservice:50051\"},{\"name\":\"EMAIL_SERVICE_ADDR\",\"value\":\"emailservice:5000\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"}],\"image\":\"gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":5050}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:42Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EMAIL_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PAYMENT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":5050,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:42Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:41Z" - } - ], - "name": "checkoutservice", - "namespace": "hipster", - "resourceVersion": "61262985", - "uid": "b5e6a8d8-1ec6-4acc-bf14-e3bb28bff284" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "checkoutservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "bebad8bb-8728-4813-ae19-d22a38a289a5", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:28", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-checkoutservice" - }, - "creationTimestamp": null, - "labels": { - "app": "checkoutservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "5050" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "PAYMENT_SERVICE_ADDR", - "value": "paymentservice:50051" - }, - { - "name": "EMAIL_SERVICE_ADDR", - "value": "emailservice:5000" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - } - ], - "image": "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 5050, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T14:05:32Z", - "lastUpdateTime": "2021-10-12T14:05:32Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:42Z", - "lastUpdateTime": "2021-10-13T00:27:42Z", - "message": "ReplicaSet \"checkoutservice-86c564466c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"currencyservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"currencyservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"currencyservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"7000\"}],\"image\":\"gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":7000,\"name\":\"grpc\"}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T08:37:54Z" - } - ], - "name": "currencyservice", - "namespace": "hipster", - "resourceVersion": "61423238", - "uid": "167b75e1-1be2-4764-aaad-dbb1ae248d3c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "currencyservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "4aa34494-0348-4859-9e29-56df9baf52ba", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-currencyservice" - }, - "creationTimestamp": null, - "labels": { - "app": "currencyservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "7000" - } - ], - "image": "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7000, - "name": "grpc", - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:29:19Z", - "message": "ReplicaSet \"currencyservice-544b6d849c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T08:37:54Z", - "lastUpdateTime": "2021-10-13T08:37:54Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"emailservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"emailservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"emailservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"DISABLE_PROFILER\",\"value\":\"1\"}],\"image\":\"gcr.io/google-samples/microservices-demo/emailservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:41Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"DISABLE_PROFILER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:41Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:07Z" - } - ], - "name": "emailservice", - "namespace": "hipster", - "resourceVersion": "61263204", - "uid": "9959433f-c964-4e6d-a2d7-3d1b9b617948" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "emailservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "e8aa9826-2367-44e1-9aad-a6d617b0fa06", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:48", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-emailservice" - }, - "creationTimestamp": null, - "labels": { - "app": "emailservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "DISABLE_PROFILER", - "value": "1" - } - ], - "image": "gcr.io/google-samples/microservices-demo/emailservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-12T00:11:47Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:41Z", - "lastUpdateTime": "2021-10-13T00:28:08Z", - "message": "ReplicaSet \"emailservice-cc7c4cd87\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"frontend\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"frontend\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"frontend\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"},{\"name\":\"RECOMMENDATION_SERVICE_ADDR\",\"value\":\"recommendationservice:8080\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"CHECKOUT_SERVICE_ADDR\",\"value\":\"checkoutservice:5050\"},{\"name\":\"AD_SERVICE_ADDR\",\"value\":\"adservice:9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/frontend:v0.2.3\",\"livenessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-liveness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-readiness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:44Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AD_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CHECKOUT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"RECOMMENDATION_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:44Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:34Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:22Z" - } - ], - "name": "frontend", - "namespace": "hipster", - "resourceVersion": "61263336", - "uid": "86b92d9e-22ad-4f0a-be26-41343f05f0d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "frontend" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9611f05f-4a8b-48ff-9722-e6a2ec702d65", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:57", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-frontend", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "frontend", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - }, - { - "name": "RECOMMENDATION_SERVICE_ADDR", - "value": "recommendationservice:8080" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "CHECKOUT_SERVICE_ADDR", - "value": "checkoutservice:5050" - }, - { - "name": "AD_SERVICE_ADDR", - "value": "adservice:9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/frontend:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-liveness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-readiness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:04Z", - "lastUpdateTime": "2021-10-12T00:12:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:44Z", - "lastUpdateTime": "2021-10-13T00:28:23Z", - "message": "ReplicaSet \"frontend-c747f6f47\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"loadgenerator\",\"namespace\":\"hipster\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"loadgenerator\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"loadgenerator\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"FRONTEND_ADDR\",\"value\":\"frontend:80\"},{\"name\":\"USERS\",\"value\":\"10\"}],\"image\":\"gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3\",\"name\":\"main\",\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"256Mi\"}}}],\"restartPolicy\":\"Always\",\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"main\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"FRONTEND_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"USERS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:38Z" - } - ], - "name": "loadgenerator", - "namespace": "hipster", - "resourceVersion": "61263451", - "uid": "e9200650-d25d-43f2-b1bc-4615beaed50c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "loadgenerator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "baca3d0f-fdc8-42c6-a9b1-ee29b3d173e0", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:26", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-loadgenerator", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "loadgenerator", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "FRONTEND_ADDR", - "value": "frontend:80" - }, - { - "name": "USERS", - "value": "10" - } - ], - "image": "gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "name": "main", - "resources": { - "limits": { - "cpu": "500m", - "memory": "512Mi" - }, - "requests": { - "cpu": "300m", - "memory": "256Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-13T00:24:15Z", - "lastUpdateTime": "2021-10-13T00:24:15Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:28:38Z", - "message": "ReplicaSet \"loadgenerator-6dcb6ffc4f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"paymentservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"paymentservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"paymentservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:45Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:45Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:29:27Z" - } - ], - "name": "paymentservice", - "namespace": "hipster", - "resourceVersion": "61263785", - "uid": "ab21c30f-d153-4ea8-982e-e12a71745dae" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "paymentservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "60b5720d-99b5-47a0-8bc4-656b372a6d17", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:52", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-paymentservice" - }, - "creationTimestamp": null, - "labels": { - "app": "paymentservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:45Z", - "lastUpdateTime": "2021-10-13T00:29:27Z", - "message": "ReplicaSet \"paymentservice-849b876ffd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"productcatalogservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"productcatalogservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"productcatalogservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":3550}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:46Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":3550,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:57Z" - } - ], - "name": "productcatalogservice", - "namespace": "hipster", - "resourceVersion": "61263117", - "uid": "50b29b6e-0f97-43b8-9555-a53d9c0e18f9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "productcatalogservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9bb4cc06-3907-401b-919f-c2974a623068", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-productcatalogservice" - }, - "creationTimestamp": null, - "labels": { - "app": "productcatalogservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 3550, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:46Z", - "lastUpdateTime": "2021-10-13T00:27:57Z", - "message": "ReplicaSet \"productcatalogservice-586fd876d5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"recommendationservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"recommendationservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"recommendationservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"450Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"220Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:43Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:37Z" - } - ], - "name": "recommendationservice", - "namespace": "hipster", - "resourceVersion": "61263443", - "uid": "00437f28-24c4-4759-ab93-f0be948eabc9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "recommendationservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "8cace306-b3ce-4f2f-8a6f-b122873b4eee", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-recommendationservice" - }, - "creationTimestamp": null, - "labels": { - "app": "recommendationservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "450Mi" - }, - "requests": { - "cpu": "100m", - "memory": "220Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-12T00:11:50Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:43Z", - "lastUpdateTime": "2021-10-13T00:28:37Z", - "message": "ReplicaSet \"recommendationservice-54b7b7b95d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"redis-cart\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"redis-cart\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"redis-cart\"}},\"spec\":{\"containers\":[{\"image\":\"redis:alpine\",\"livenessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"name\":\"redis\",\"ports\":[{\"containerPort\":6379}],\"readinessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"resources\":{\"limits\":{\"cpu\":\"125m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"70m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/data\",\"name\":\"redis-data\"}]}],\"volumes\":[{\"emptyDir\":{},\"name\":\"redis-data\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:50Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"redis\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":6379,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/data\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"redis-data\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:38Z" - } - ], - "name": "redis-cart", - "namespace": "hipster", - "resourceVersion": "61262948", - "uid": "76b3aebb-9ec5-479e-81ae-975ccf1bc6ec" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "redis-cart" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "838a7c21-618b-4693-a13b-838a9231ca58", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-redis-cart" - }, - "creationTimestamp": null, - "labels": { - "app": "redis-cart", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "image": "redis:alpine", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "name": "redis", - "ports": [ - { - "containerPort": 6379, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "125m", - "memory": "256Mi" - }, - "requests": { - "cpu": "70m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/data", - "name": "redis-data" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "emptyDir": {}, - "name": "redis-data" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:57Z", - "lastUpdateTime": "2021-10-12T00:11:57Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-13T00:27:38Z", - "message": "ReplicaSet \"redis-cart-594778c8b9\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"shippingservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"shippingservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"shippingservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:49Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:49Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:11Z" - } - ], - "name": "shippingservice", - "namespace": "hipster", - "resourceVersion": "61262726", - "uid": "febd2fe5-0e28-448e-aabd-31904ebb82a9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "shippingservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6503b850-839c-4b73-95ab-195d27b3c10d", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:26:58", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-shippingservice" - }, - "creationTimestamp": null, - "labels": { - "app": "shippingservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:00Z", - "lastUpdateTime": "2021-10-12T00:12:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:49Z", - "lastUpdateTime": "2021-10-13T00:27:11Z", - "message": "ReplicaSet \"shippingservice-758c9b4d4b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":\"10%\",\"maxUnavailable\":0}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"kubedns\",\"prometheus.io/port\":\"10054\",\"prometheus.io/scrape\":\"true\",\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"labels\":{\"k8s-app\":\"kube-dns\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchExpressions\":[{\"key\":\"k8s-app\",\"operator\":\"In\",\"values\":[\"kube-dns\"]}]},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"--domain=cluster.local.\",\"--dns-port=10053\",\"--config-dir=/kube-dns-config\",\"--v=2\"],\"env\":[{\"name\":\"PROMETHEUS_PORT\",\"value\":\"10055\"}],\"image\":\"gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/kubedns\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"kubedns\",\"ports\":[{\"containerPort\":10053,\"name\":\"dns-local\",\"protocol\":\"UDP\"},{\"containerPort\":10053,\"name\":\"dns-tcp-local\",\"protocol\":\"TCP\"},{\"containerPort\":10055,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readiness\",\"port\":8081,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":3,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"memory\":\"210Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"70Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001},\"volumeMounts\":[{\"mountPath\":\"/kube-dns-config\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"-v=2\",\"-logtostderr\",\"-configDir=/etc/k8s/dns/dnsmasq-nanny\",\"-restartDnsmasq=true\",\"--\",\"-k\",\"--cache-size=1000\",\"--no-negcache\",\"--dns-forward-max=1500\",\"--log-facility=-\",\"--server=/cluster.local/127.0.0.1#10053\",\"--server=/in-addr.arpa/127.0.0.1#10053\",\"--server=/ip6.arpa/127.0.0.1#10053\"],\"image\":\"gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/dnsmasq\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"dnsmasq\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"150m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"capabilities\":{\"add\":[\"NET_BIND_SERVICE\",\"SETGID\"],\"drop\":[\"all\"]}},\"volumeMounts\":[{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"--v=2\",\"--logtostderr\",\"--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV\",\"--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV\"],\"image\":\"gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/metrics\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"sidecar\",\"ports\":[{\"containerPort\":10054,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001}}],\"dnsPolicy\":\"Default\",\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 4, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:scheduler.alpha.kubernetes.io/critical-pod": {}, - "f:seccomp.security.alpha.kubernetes.io/pod": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:podAntiAffinity": { - ".": {}, - "f:preferredDuringSchedulingIgnoredDuringExecution": {} - } - }, - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:capabilities": { - ".": {}, - "f:add": {}, - "f:drop": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"kubedns\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PROMETHEUS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10053,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10053,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10055,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/kube-dns-config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"sidecar\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10054,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - "f:image": {} - }, - "k:{\"name\":\"kubedns\"}": { - "f:image": {} - }, - "k:{\"name\":\"sidecar\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:06:26Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "53109905", - "uid": "cd5cca24-7cd2-4548-a5d3-d90beb79f9e8" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 2, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "10%", - "maxUnavailable": 0 - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "kubedns", - "prometheus.io/port": "10054", - "prometheus.io/scrape": "true", - "scheduler.alpha.kubernetes.io/critical-pod": "", - "seccomp.security.alpha.kubernetes.io/pod": "runtime/default" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns" - } - }, - "spec": { - "affinity": { - "podAntiAffinity": { - "preferredDuringSchedulingIgnoredDuringExecution": [ - { - "podAffinityTerm": { - "labelSelector": { - "matchExpressions": [ - { - "key": "k8s-app", - "operator": "In", - "values": [ - "kube-dns" - ] - } - ] - }, - "topologyKey": "kubernetes.io/hostname" - }, - "weight": 100 - } - ] - } - }, - "containers": [ - { - "args": [ - "--domain=cluster.local.", - "--dns-port=10053", - "--config-dir=/kube-dns-config", - "--v=2" - ], - "env": [ - { - "name": "PROMETHEUS_PORT", - "value": "10055" - } - ], - "image": "gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/kubedns", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "kubedns", - "ports": [ - { - "containerPort": 10053, - "name": "dns-local", - "protocol": "UDP" - }, - { - "containerPort": 10053, - "name": "dns-tcp-local", - "protocol": "TCP" - }, - { - "containerPort": 10055, - "name": "metrics", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/readiness", - "port": 8081, - "scheme": "HTTP" - }, - "initialDelaySeconds": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "resources": { - "limits": { - "memory": "210Mi" - }, - "requests": { - "cpu": "100m", - "memory": "70Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/kube-dns-config", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "-v=2", - "-logtostderr", - "-configDir=/etc/k8s/dns/dnsmasq-nanny", - "-restartDnsmasq=true", - "--", - "-k", - "--cache-size=1000", - "--no-negcache", - "--dns-forward-max=1500", - "--log-facility=-", - "--server=/cluster.local/127.0.0.1#10053", - "--server=/in-addr.arpa/127.0.0.1#10053", - "--server=/ip6.arpa/127.0.0.1#10053" - ], - "image": "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/dnsmasq", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "dnsmasq", - "ports": [ - { - "containerPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "150m", - "memory": "20Mi" - } - }, - "securityContext": { - "capabilities": { - "add": [ - "NET_BIND_SERVICE", - "SETGID" - ], - "drop": [ - "all" - ] - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/k8s/dns/dnsmasq-nanny", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "--v=2", - "--logtostderr", - "--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV", - "--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV" - ], - "image": "gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/metrics", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "sidecar", - "ports": [ - { - "containerPort": 10054, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns", - "serviceAccountName": "kube-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 2, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-09-11T01:57:38Z", - "message": "ReplicaSet \"kube-dns-59844ff879\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:06:26Z", - "lastUpdateTime": "2021-09-25T17:06:26Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 4, - "readyReplicas": 2, - "replicas": 2, - "updatedReplicas": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns-autoscaler\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns-autoscaler\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"spec\":{\"containers\":[{\"command\":[\"/cluster-proportional-autoscaler\",\"--namespace=kube-system\",\"--configmap=kube-dns-autoscaler\",\"--target=Deployment/kube-dns\",\"--default-params={\\\"linear\\\":{\\\"coresPerReplica\\\":256,\\\"nodesPerReplica\\\":16,\\\"preventSinglePointFailure\\\":true,\\\"includeUnschedulableNodes\\\":true}}\",\"--logtostderr=true\",\"--v=2\"],\"image\":\"gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0\",\"name\":\"autoscaler\",\"resources\":{\"requests\":{\"cpu\":\"20m\",\"memory\":\"10Mi\"}}}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"seccompProfile\":{\"type\":\"RuntimeDefault\"},\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns-autoscaler\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns-autoscaler", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"autoscaler\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:02:52Z" - } - ], - "name": "kube-dns-autoscaler", - "namespace": "kube-system", - "resourceVersion": "53108562", - "uid": "c84ce079-f3c8-46ba-871f-0f2d42ffee1e" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/cluster-proportional-autoscaler", - "--namespace=kube-system", - "--configmap=kube-dns-autoscaler", - "--target=Deployment/kube-dns", - "--default-params={\"linear\":{\"coresPerReplica\":256,\"nodesPerReplica\":16,\"preventSinglePointFailure\":true,\"includeUnschedulableNodes\":true}}", - "--logtostderr=true", - "--v=2" - ], - "image": "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "autoscaler", - "resources": { - "requests": { - "cpu": "20m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "seccompProfile": { - "type": "RuntimeDefault" - }, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns-autoscaler", - "serviceAccountName": "kube-dns-autoscaler", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:54:39Z", - "message": "ReplicaSet \"kube-dns-autoscaler-844c9d9448\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:02:52Z", - "lastUpdateTime": "2021-09-25T17:02:52Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"glbc\",\"kubernetes.io/cluster-service\":\"true\",\"kubernetes.io/name\":\"GLBC\"},\"name\":\"l7-default-backend\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"glbc\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"glbc\",\"name\":\"glbc\"}},\"spec\":{\"containers\":[{\"image\":\"k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":30,\"timeoutSeconds\":5},\"name\":\"default-http-backend\",\"ports\":[{\"containerPort\":8080}],\"resources\":{\"limits\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}}}],\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"tolerations\":[{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "glbc", - "kubernetes.io/cluster-service": "true", - "kubernetes.io/name": "GLBC" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:kubernetes.io/name": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:name": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"default-http-backend\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:seccompProfile": { - "f:type": {} - } - }, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:01:20Z" - } - ], - "name": "l7-default-backend", - "namespace": "kube-system", - "resourceVersion": "53107969", - "uid": "32a76c03-37a1-44e9-b293-dd6b46ed274b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "glbc" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "glbc", - "name": "glbc" - } - }, - "spec": { - "containers": [ - { - "image": "k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 30, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "default-http-backend", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "10m", - "memory": "20Mi" - }, - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:56:25Z", - "message": "ReplicaSet \"l7-default-backend-56cb9644f6\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:01:20Z", - "lastUpdateTime": "2021-09-25T17:01:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "24", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metrics-server\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server-v0.3.6\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server\"},\"spec\":{\"containers\":[{\"command\":[\"/metrics-server\",\"--metric-resolution=30s\",\"--kubelet-port=10255\",\"--deprecated-kubelet-completely-insecure=true\",\"--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP\"],\"image\":\"k8s.gcr.io/metrics-server-amd64:v0.3.6\",\"name\":\"metrics-server\",\"ports\":[{\"containerPort\":443,\"name\":\"https\",\"protocol\":\"TCP\"}]},{\"command\":[\"/pod_nanny\",\"--config-dir=/etc/config\",\"--cpu=40m\",\"--extra-cpu=0.5m\",\"--memory=35Mi\",\"--extra-memory=4Mi\",\"--threshold=5\",\"--deployment=metrics-server-v0.3.6\",\"--container=metrics-server\",\"--poll-period=300000\",\"--estimator=exponential\",\"--scale-down-delay=24h\",\"--minClusterSize=5\",\"--use-metrics=true\"],\"env\":[{\"name\":\"MY_POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"MY_POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"gke.gcr.io/addon-resizer:1.8.11-gke.0\",\"name\":\"metrics-server-nanny\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"5m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"metrics-server-config-volume\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"metrics-server\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"metrics-server-config\"},\"name\":\"metrics-server-config-volume\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 24, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metrics-server", - "kubernetes.io/cluster-service": "true", - "version": "v0.3.6" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:version": {} - }, - "f:name": {} - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - }, - "k:{\"name\":\"metrics-server-nanny\"}": { - ".": {}, - "f:command": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"MY_POD_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"MY_POD_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"metrics-server-config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - "f:resources": { - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - } - } - } - } - } - } - }, - "manager": "pod_nanny", - "operation": "Update", - "time": "2021-06-13T13:42:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-26T17:13:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-26T17:13:52Z" - } - ], - "name": "metrics-server-v0.3.6", - "namespace": "kube-system", - "resourceVersion": "53582788", - "uid": "872d0f34-7998-45d3-9eea-570e0a47e03c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - }, - "name": "metrics-server" - }, - "spec": { - "containers": [ - { - "command": [ - "/metrics-server", - "--metric-resolution=30s", - "--kubelet-port=10255", - "--deprecated-kubelet-completely-insecure=true", - "--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP" - ], - "image": "k8s.gcr.io/metrics-server-amd64:v0.3.6", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server", - "ports": [ - { - "containerPort": 443, - "name": "https", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "44m", - "memory": "63Mi" - }, - "requests": { - "cpu": "44m", - "memory": "63Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - }, - { - "command": [ - "/pod_nanny", - "--config-dir=/etc/config", - "--cpu=40m", - "--extra-cpu=0.5m", - "--memory=35Mi", - "--extra-memory=4Mi", - "--threshold=5", - "--deployment=metrics-server-v0.3.6", - "--container=metrics-server", - "--poll-period=300000", - "--estimator=exponential", - "--scale-down-delay=24h", - "--minClusterSize=5", - "--use-metrics=true" - ], - "env": [ - { - "name": "MY_POD_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.name" - } - } - }, - { - "name": "MY_POD_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - } - ], - "image": "gke.gcr.io/addon-resizer:1.8.11-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server-nanny", - "resources": { - "limits": { - "cpu": "100m", - "memory": "300Mi" - }, - "requests": { - "cpu": "5m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "metrics-server-config-volume" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "serviceAccount": "metrics-server", - "serviceAccountName": "metrics-server", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "metrics-server-config" - }, - "name": "metrics-server-config-volume" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-09-25T17:12:33Z", - "lastUpdateTime": "2021-09-25T17:12:33Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-06-13T13:42:20Z", - "lastUpdateTime": "2021-09-26T17:13:52Z", - "message": "ReplicaSet \"metrics-server-v0.3.6-7889654bbb\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 24, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "6", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-proxy\"},\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-proxy\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-proxy\"}},\"spec\":{\"containers\":[{\"command\":[\"/bin/sh\",\"-c\",\"kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\\u003e\\u003e/var/log/kube-proxy.log 2\\u003e\\u00261\"],\"env\":[{\"name\":\"KUBERNETES_SERVICE_HOST\",\"value\":\"34.78.97.243\"}],\"image\":\"gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001\",\"name\":\"kube-proxy\",\"resources\":{\"requests\":{\"cpu\":\"100m\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/log\",\"name\":\"varlog\",\"readOnly\":false},{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/lib/modules\",\"name\":\"lib-modules\",\"readOnly\":true}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\",\"node.kubernetes.io/kube-proxy-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"kube-proxy\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/log\"},\"name\":\"varlog\"},{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"hostPath\":{\"path\":\"/lib/modules\"},\"name\":\"lib-modules\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "generation": 6, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-proxy" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBERNETES_SERVICE_HOST\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/kube-proxy-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - "f:command": {}, - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:44Z" - } - ], - "name": "kube-proxy", - "namespace": "kube-system", - "resourceVersion": "52161714", - "uid": "bb6f9ab0-e586-407b-95c0-773637c696e8" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-proxy" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-proxy" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "env": [ - { - "name": "KUBERNETES_SERVICE_HOST", - "value": "34.78.97.243" - } - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux", - "node.kubernetes.io/kube-proxy-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "kube-proxy", - "serviceAccountName": "kube-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 6 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"},\"name\":\"metadata-proxy-v0.1\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metadata-proxy\",\"version\":\"v0.1\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"}},\"spec\":{\"containers\":[{\"args\":[\"--addr=0.0.0.0:988\"],\"image\":\"k8s.gcr.io/metadata-proxy:v0.1.12\",\"name\":\"metadata-proxy\",\"resources\":{\"limits\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"},\"requests\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"}},\"securityContext\":{\"privileged\":true}}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"cloud.google.com/metadata-proxy-ready\":\"true\",\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"metadata-proxy\",\"terminationGracePeriodSeconds\":30,\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 3, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:cloud.google.com/metadata-proxy-ready": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - "f:args": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - } - ], - "name": "metadata-proxy-v0.1", - "namespace": "kube-system", - "resourceVersion": "25934435", - "uid": "94bf5845-f77b-47d4-bcec-e78549b4d8a3" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metadata-proxy", - "version": "v0.1" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--addr=0.0.0.0:988" - ], - "image": "k8s.gcr.io/metadata-proxy:v0.1.12", - "imagePullPolicy": "IfNotPresent", - "name": "metadata-proxy", - "resources": { - "limits": { - "cpu": "30m", - "memory": "25Mi" - }, - "requests": { - "cpu": "30m", - "memory": "25Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "cloud.google.com/metadata-proxy-ready": "true", - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "metadata-proxy", - "serviceAccountName": "metadata-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 3 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"node-local-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"node-local-dns\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"nodelocaldns\",\"components.gke.io/component-version\":\"1.4.0\",\"prometheus.io/port\":\"9253\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"k8s-app\":\"node-local-dns\"}},\"spec\":{\"containers\":[{\"args\":[\"-localip\",\"169.254.20.10,10.72.0.10\",\"-conf\",\"/etc/Corefile\",\"-upstreamsvc\",\"kube-dns-upstream\",\"-kubednscm\",\"/etc/kube-dns\"],\"image\":\"gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1\",\"livenessProbe\":{\"httpGet\":{\"host\":\"169.254.20.10\",\"path\":\"/health\",\"port\":8080},\"initialDelaySeconds\":60,\"timeoutSeconds\":5},\"name\":\"node-cache\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"},{\"containerPort\":9253,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"25m\",\"memory\":\"5Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/etc/coredns\",\"name\":\"config-volume\"},{\"mountPath\":\"/etc/kube-dns\",\"name\":\"kube-dns-config\"}]}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"addon.gke.io/node-local-dns-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"node-local-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"},{\"configMap\":{\"items\":[{\"key\":\"Corefile\",\"path\":\"Corefile.base\"}],\"name\":\"node-local-dns\"},\"name\":\"config-volume\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"}}}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "node-local-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:host": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":9253,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/coredns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/kube-dns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:addon.gke.io/node-local-dns-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "53114241", - "uid": "5069e9ba-0784-41bf-9577-3757bcb3b6d6" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "node-local-dns" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "nodelocaldns", - "components.gke.io/component-version": "1.4.0", - "prometheus.io/port": "9253", - "prometheus.io/scrape": "true" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "node-local-dns" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-localip", - "169.254.20.10,10.72.0.10", - "-conf", - "/etc/Corefile", - "-upstreamsvc", - "kube-dns-upstream", - "-kubednscm", - "/etc/kube-dns" - ], - "image": "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "host": "169.254.20.10", - "path": "/health", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "node-cache", - "ports": [ - { - "containerPort": 53, - "hostPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "hostPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - }, - { - "containerPort": 9253, - "hostPort": 9253, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "25m", - "memory": "5Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/etc/coredns", - "name": "config-volume" - }, - { - "mountPath": "/etc/kube-dns", - "name": "kube-dns-config" - } - ] - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "addon.gke.io/node-local-dns-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "node-local-dns", - "serviceAccountName": "node-local-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "Corefile", - "path": "Corefile.base" - } - ], - "name": "node-local-dns" - }, - "name": "config-volume" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 2, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"nvidia-gpu-device-plugin\"},\"name\":\"nvidia-gpu-device-plugin\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"cloud.google.com/gke-accelerator\",\"operator\":\"Exists\"}]}]}}},\"containers\":[{\"command\":[\"/usr/bin/nvidia-gpu-device-plugin\",\"-logtostderr\",\"--enable-container-gpu-metrics\",\"--enable-health-monitoring\"],\"env\":[{\"name\":\"LD_LIBRARY_PATH\",\"value\":\"/usr/local/nvidia/lib64\"}],\"image\":\"gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317\",\"name\":\"nvidia-gpu-device-plugin\",\"ports\":[{\"containerPort\":2112,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/device-plugin\",\"name\":\"device-plugin\"},{\"mountPath\":\"/dev\",\"name\":\"dev\"},{\"mountPath\":\"/usr/local/nvidia\",\"name\":\"nvidia\"},{\"mountPath\":\"/var/lib/kubelet/pod-resources\",\"name\":\"pod-resources\"},{\"mountPath\":\"/proc\",\"name\":\"proc\"},{\"mountPath\":\"/etc/nvidia\",\"name\":\"nvidia-config\"}]}],\"priorityClassName\":\"system-node-critical\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/device-plugins\"},\"name\":\"device-plugin\"},{\"hostPath\":{\"path\":\"/dev\"},\"name\":\"dev\"},{\"hostPath\":{\"path\":\"/home/kubernetes/bin/nvidia\",\"type\":\"Directory\"},\"name\":\"nvidia\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/pod-resources\"},\"name\":\"pod-resources\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"proc\"},{\"hostPath\":{\"path\":\"/etc/nvidia\"},\"name\":\"nvidia-config\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:17Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "nvidia-gpu-device-plugin" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:nodeAffinity": { - ".": {}, - "f:requiredDuringSchedulingIgnoredDuringExecution": { - ".": {}, - "f:nodeSelectorTerms": {} - } - } - }, - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"LD_LIBRARY_PATH\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":2112,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/device-plugin\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/local/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet/pod-resources\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"dev\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"device-plugin\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"nvidia\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"pod-resources\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - "f:command": {}, - "f:image": {}, - "f:volumeMounts": { - "k:{\"mountPath\":\"/etc/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/proc\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:volumes": { - "k:{\"name\":\"nvidia-config\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"proc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "nvidia-gpu-device-plugin", - "namespace": "kube-system", - "resourceVersion": "25934477", - "uid": "14396a20-ecee-4671-aefe-2a5b9d2e0dde" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "spec": { - "affinity": { - "nodeAffinity": { - "requiredDuringSchedulingIgnoredDuringExecution": { - "nodeSelectorTerms": [ - { - "matchExpressions": [ - { - "key": "cloud.google.com/gke-accelerator", - "operator": "Exists" - } - ] - } - ] - } - } - }, - "containers": [ - { - "command": [ - "/usr/bin/nvidia-gpu-device-plugin", - "-logtostderr", - "--enable-container-gpu-metrics", - "--enable-health-monitoring" - ], - "env": [ - { - "name": "LD_LIBRARY_PATH", - "value": "/usr/local/nvidia/lib64" - } - ], - "image": "gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317", - "imagePullPolicy": "IfNotPresent", - "name": "nvidia-gpu-device-plugin", - "ports": [ - { - "containerPort": 2112, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "20Mi" - }, - "requests": { - "cpu": "50m", - "memory": "20Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/device-plugin", - "name": "device-plugin" - }, - { - "mountPath": "/dev", - "name": "dev" - }, - { - "mountPath": "/usr/local/nvidia", - "name": "nvidia" - }, - { - "mountPath": "/var/lib/kubelet/pod-resources", - "name": "pod-resources" - }, - { - "mountPath": "/proc", - "name": "proc" - }, - { - "mountPath": "/etc/nvidia", - "name": "nvidia-config" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/device-plugins", - "type": "" - }, - "name": "device-plugin" - }, - { - "hostPath": { - "path": "/dev", - "type": "" - }, - "name": "dev" - }, - { - "hostPath": { - "path": "/home/kubernetes/bin/nvidia", - "type": "Directory" - }, - "name": "nvidia" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/pod-resources", - "type": "" - }, - "name": "pod-resources" - }, - { - "hostPath": { - "path": "/proc", - "type": "" - }, - "name": "proc" - }, - { - "hostPath": { - "path": "/etc/nvidia", - "type": "" - }, - "name": "nvidia-config" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:02:45.009201226Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:02:48Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"6de798cc-d558-479a-8ef4-38363e434633\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.63\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:02:55Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-5naq", - "uid": "6de798cc-d558-479a-8ef4-38363e434633" - } - ], - "resourceVersion": "53108585", - "uid": "fdd66d80-d09d-4b43-a291-b3797c7a5864" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-5naq", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://50767376b8a42b7a390e84c5c451d1485b1a562873b915100dc605bbcc49c1c5", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:02:48Z" - } - } - } - ], - "hostIP": "10.132.0.63", - "phase": "Running", - "podIP": "10.132.0.63", - "podIPs": [ - { - "ip": "10.132.0.63" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:02:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:09:05.595580038Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:09:09Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"d288c56c-2a00-42fe-b2ea-b8761fec2a4e\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.193\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:09:16Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-abj3", - "uid": "d288c56c-2a00-42fe-b2ea-b8761fec2a4e" - } - ], - "resourceVersion": "53110982", - "uid": "0866b060-d7a6-40bc-9ed9-292fbce958e9" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-abj3", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b04121a3de085254493b48dbe1be551abd021877d1c098afbd19e6429df8f4ba", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:09:08Z" - } - } - } - ], - "hostIP": "10.132.15.193", - "phase": "Running", - "podIP": "10.132.15.193", - "podIPs": [ - { - "ip": "10.132.15.193" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:09:06Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:56:27.195784979Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:56:29Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"9aa58d78-0147-4564-9900-0409a6bec341\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.61\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:56:37Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-enr8", - "uid": "9aa58d78-0147-4564-9900-0409a6bec341" - } - ], - "resourceVersion": "53106105", - "uid": "b940e7b5-9e7f-4ac7-a3ee-6c6655c1e65a" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-enr8", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b9375aed4bc463ecfa5fcfb0cfb3b55d087416bfe0c3267c1395e8f93569d03c", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:56:29Z" - } - } - } - ], - "hostIP": "10.132.0.61", - "phase": "Running", - "podIP": "10.132.0.61", - "podIPs": [ - { - "ip": "10.132.0.61" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:56:28Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:59:41.285621877Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:59:44Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"c1ab3c15-9764-40f5-ba6b-82556dc98ea2\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.62\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:59:52Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-oq2w", - "uid": "c1ab3c15-9764-40f5-ba6b-82556dc98ea2" - } - ], - "resourceVersion": "53107378", - "uid": "19e52dea-6339-4ed7-8e32-3d39b242d133" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-oq2w", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://a0b27bef16953a38c48075124547583280bccf28d1d6cf54c3b3e754e2847c86", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:59:44Z" - } - } - } - ], - "hostIP": "10.132.0.62", - "phase": "Running", - "podIP": "10.132.0.62", - "podIPs": [ - { - "ip": "10.132.0.62" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:59:42Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:12:12.095932889Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:12:15Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"7042c0e8-8dc5-4d1d-8b36-92c692c31c76\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.194\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:12:22Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-rgdp", - "uid": "7042c0e8-8dc5-4d1d-8b36-92c692c31c76" - } - ], - "resourceVersion": "53112149", - "uid": "5248c280-7bde-4fe9-a74e-56ae25abb0d2" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-rgdp", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://fd91ae480585a78c59ef401dc852d58921e76693ecbd908d98e4b63da6c298ff", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:12:14Z" - } - } - } - ], - "hostIP": "10.132.15.194", - "phase": "Running", - "podIP": "10.132.15.194", - "podIPs": [ - { - "ip": "10.132.15.194" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:12:13Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:05:45.558688986Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:05:49Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"a58f61e7-9d9e-4266-90d4-16b9969cb373\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.192\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:05:56Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-x940", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-x940", - "uid": "a58f61e7-9d9e-4266-90d4-16b9969cb373" - } - ], - "resourceVersion": "53109692", - "uid": "71a05734-f741-4b7e-82fe-765c555b3607" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-x940", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://6abab671623159f7174321118f58600f8955267a139a72508e9a73631ef7920d", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:05:48Z" - } - } - } - ], - "hostIP": "10.132.15.192", - "phase": "Running", - "podIP": "10.132.15.192", - "podIPs": [ - { - "ip": "10.132.15.192" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:05:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:15:06.466708143Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:15:10Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"65f37105-dd71-428b-bf8b-0e82b88027f1\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.195\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:15:17Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-zzyg", - "uid": "65f37105-dd71-428b-bf8b-0e82b88027f1" - } - ], - "resourceVersion": "53113200", - "uid": "dac23622-ae54-4a1a-a6ca-3c020911966e" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-zzyg", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://ee309dad5cb7047fcbd7eb0401760ccb4bd986080ab11c860911e37b132a2a5c", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:15:09Z" - } - } - } - ], - "hostIP": "10.132.15.195", - "phase": "Running", - "podIP": "10.132.15.195", - "podIPs": [ - { - "ip": "10.132.15.195" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:15:07Z" - } - } - ], - "listInputKinds": null - } - ], - "remediation": "Remove hostPID and hostIPC privileges unless they are absolutely necessary.", - "description": "Containers should be as isolated as possible from the host machine. The hostPID and hostIPC fields in Kubernetes may excessively expose the host to potentially malicious actions.", - "score": 100 - }, - { - "guid": "", - "attributes": { - "armoBuiltin": true - }, - "id": "C-0017", - "controlID": "C-0017", - "name": "Immutable container filesystem", - "ruleReports": [ - { - "name": "immutable-container-filesystem", - "remediation": "", - "ruleStatus": { - "status": "success", - "message": "" - }, - "ruleResponses": [ - { - "alertMessage": "container: kube-proxy in pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:02:45.009201226Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:02:48Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"6de798cc-d558-479a-8ef4-38363e434633\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.63\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:02:55Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-5naq", - "uid": "6de798cc-d558-479a-8ef4-38363e434633" - } - ], - "resourceVersion": "53108585", - "uid": "fdd66d80-d09d-4b43-a291-b3797c7a5864" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-5naq", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://50767376b8a42b7a390e84c5c451d1485b1a562873b915100dc605bbcc49c1c5", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:02:48Z" - } - } - } - ], - "hostIP": "10.132.0.63", - "phase": "Running", - "podIP": "10.132.0.63", - "podIPs": [ - { - "ip": "10.132.0.63" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:02:46Z" - } - } - ] - } - }, - { - "alertMessage": "container: kube-proxy in pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3 has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:09:05.595580038Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:09:09Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"d288c56c-2a00-42fe-b2ea-b8761fec2a4e\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.193\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:09:16Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-abj3", - "uid": "d288c56c-2a00-42fe-b2ea-b8761fec2a4e" - } - ], - "resourceVersion": "53110982", - "uid": "0866b060-d7a6-40bc-9ed9-292fbce958e9" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-abj3", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b04121a3de085254493b48dbe1be551abd021877d1c098afbd19e6429df8f4ba", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:09:08Z" - } - } - } - ], - "hostIP": "10.132.15.193", - "phase": "Running", - "podIP": "10.132.15.193", - "podIPs": [ - { - "ip": "10.132.15.193" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:09:06Z" - } - } - ] - } - }, - { - "alertMessage": "container: kube-proxy in pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8 has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:56:27.195784979Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:56:29Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"9aa58d78-0147-4564-9900-0409a6bec341\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.61\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:56:37Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-enr8", - "uid": "9aa58d78-0147-4564-9900-0409a6bec341" - } - ], - "resourceVersion": "53106105", - "uid": "b940e7b5-9e7f-4ac7-a3ee-6c6655c1e65a" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-enr8", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b9375aed4bc463ecfa5fcfb0cfb3b55d087416bfe0c3267c1395e8f93569d03c", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:56:29Z" - } - } - } - ], - "hostIP": "10.132.0.61", - "phase": "Running", - "podIP": "10.132.0.61", - "podIPs": [ - { - "ip": "10.132.0.61" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:56:28Z" - } - } - ] - } - }, - { - "alertMessage": "container: kube-proxy in pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:59:41.285621877Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:59:44Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"c1ab3c15-9764-40f5-ba6b-82556dc98ea2\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.62\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:59:52Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-oq2w", - "uid": "c1ab3c15-9764-40f5-ba6b-82556dc98ea2" - } - ], - "resourceVersion": "53107378", - "uid": "19e52dea-6339-4ed7-8e32-3d39b242d133" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-oq2w", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://a0b27bef16953a38c48075124547583280bccf28d1d6cf54c3b3e754e2847c86", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:59:44Z" - } - } - } - ], - "hostIP": "10.132.0.62", - "phase": "Running", - "podIP": "10.132.0.62", - "podIPs": [ - { - "ip": "10.132.0.62" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:59:42Z" - } - } - ] - } - }, - { - "alertMessage": "container: kube-proxy in pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:12:12.095932889Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:12:15Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"7042c0e8-8dc5-4d1d-8b36-92c692c31c76\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.194\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:12:22Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-rgdp", - "uid": "7042c0e8-8dc5-4d1d-8b36-92c692c31c76" - } - ], - "resourceVersion": "53112149", - "uid": "5248c280-7bde-4fe9-a74e-56ae25abb0d2" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-rgdp", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://fd91ae480585a78c59ef401dc852d58921e76693ecbd908d98e4b63da6c298ff", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:12:14Z" - } - } - } - ], - "hostIP": "10.132.15.194", - "phase": "Running", - "podIP": "10.132.15.194", - "podIPs": [ - { - "ip": "10.132.15.194" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:12:13Z" - } - } - ] - } - }, - { - "alertMessage": "container: kube-proxy in pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-x940 has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:05:45.558688986Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:05:49Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"a58f61e7-9d9e-4266-90d4-16b9969cb373\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.192\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:05:56Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-x940", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-x940", - "uid": "a58f61e7-9d9e-4266-90d4-16b9969cb373" - } - ], - "resourceVersion": "53109692", - "uid": "71a05734-f741-4b7e-82fe-765c555b3607" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-x940", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://6abab671623159f7174321118f58600f8955267a139a72508e9a73631ef7920d", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:05:48Z" - } - } - } - ], - "hostIP": "10.132.15.192", - "phase": "Running", - "podIP": "10.132.15.192", - "podIPs": [ - { - "ip": "10.132.15.192" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:05:46Z" - } - } - ] - } - }, - { - "alertMessage": "container: kube-proxy in pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:15:06.466708143Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:15:10Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"65f37105-dd71-428b-bf8b-0e82b88027f1\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.195\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:15:17Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-zzyg", - "uid": "65f37105-dd71-428b-bf8b-0e82b88027f1" - } - ], - "resourceVersion": "53113200", - "uid": "dac23622-ae54-4a1a-a6ca-3c020911966e" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-zzyg", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://ee309dad5cb7047fcbd7eb0401760ccb4bd986080ab11c860911e37b132a2a5c", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:15:09Z" - } - } - } - ], - "hostIP": "10.132.15.195", - "phase": "Running", - "podIP": "10.132.15.195", - "podIPs": [ - { - "ip": "10.132.15.195" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:15:07Z" - } - } - ] - } - }, - { - "alertMessage": "container :ca-audit in Deployment: ca-audit has mutable filesystem", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-audit\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-audit\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CONFIG_FILES\",\"value\":\"/config/config.json\"},{\"name\":\"CA_SERVER_TYPE\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"cluster_kind\",\"name\":\"ca-audit\"}}}],\"image\":\"quay.io/armosec/k8s-ca-auditlog-ubi:21\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-audit\",\"ports\":[{\"containerPort\":443,\"name\":\"ca-audit-port\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/config\",\"name\":\"ca-audit\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-audit\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"config\",\"path\":\"config.json\"}],\"name\":\"ca-audit\"},\"name\":\"ca-audit\"},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:54Z", - "generation": 1, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CONFIG_FILES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_SERVER_TYPE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:54Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-audit", - "namespace": "cyberarmor-system", - "resourceVersion": "60787209", - "uid": "687f52ea-6956-4e8a-bb8c-7ea35a04b3f0" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-audit" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CONFIG_FILES", - "value": "/config/config.json" - }, - { - "name": "CA_SERVER_TYPE", - "valueFrom": { - "configMapKeyRef": { - "key": "cluster_kind", - "name": "ca-audit" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-auditlog-ubi:21", - "imagePullPolicy": "Always", - "name": "ca-audit", - "ports": [ - { - "containerPort": 443, - "name": "ca-audit-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/config", - "name": "ca-audit", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-audit", - "serviceAccountName": "ca-audit", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "config", - "path": "config.json" - } - ], - "name": "ca-audit" - }, - "name": "ca-audit" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:54Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-audit-c667df747\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - }, - "exception": { - "guid": "5856164c-c93c-4111-866a-dc7545e89211", - "name": "exception_C-0017_cyberarmor-system_2fd1eec2eb2183473233d907900d9dfb", - "attributes": { - "namespaceOnly": "true" - }, - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-13T13:03:11.099594", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "namespace": "cyberarmor-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Immutable container filesystem", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "container :ca-dashboard-aggregator in Deployment: ca-dashboard-aggregator has mutable filesystem", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-dashboard-aggregator\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-dashboard-aggregator\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-configtype=1\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-dashboard-aggregator\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"40Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:55Z", - "generation": 1, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-dashboard-aggregator\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:55Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T23:55:20Z" - } - ], - "name": "ca-dashboard-aggregator", - "namespace": "cyberarmor-system", - "resourceVersion": "61250607", - "uid": "0ba23569-e254-4388-b22f-30cc1eca031b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-dashboard-aggregator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-configtype=1", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173", - "imagePullPolicy": "Always", - "name": "ca-dashboard-aggregator", - "resources": { - "limits": { - "cpu": "200m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "40Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:18:55Z", - "lastUpdateTime": "2021-10-12T00:19:19Z", - "message": "ReplicaSet \"ca-dashboard-aggregator-5b8bdbc8f5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-12T23:55:20Z", - "lastUpdateTime": "2021-10-12T23:55:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - }, - "exception": { - "guid": "5856164c-c93c-4111-866a-dc7545e89211", - "name": "exception_C-0017_cyberarmor-system_2fd1eec2eb2183473233d907900d9dfb", - "attributes": { - "namespaceOnly": "true" - }, - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-13T13:03:11.099594", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "namespace": "cyberarmor-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Immutable container filesystem", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "container :ca-notification-server in Deployment: ca-notification-server has mutable filesystem", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-notification-server\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-notification-server\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"maserNotificationServer\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\",\"value\":\"customerGUID\"},{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\",\"value\":\"8001\"},{\"name\":\"CA_NOTIFICATION_SERVER_PORT\",\"value\":\"8002\"}],\"image\":\"quay.io/armosec/notification-server-ubi:89\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-notification-server\",\"ports\":[{\"containerPort\":8001,\"name\":\"websocket\"},{\"containerPort\":8002,\"name\":\"rest-api\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:59Z", - "generation": 1, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-notification-server\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8001,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:59Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:11Z" - } - ], - "name": "ca-notification-server", - "namespace": "cyberarmor-system", - "resourceVersion": "60787036", - "uid": "8c3dc6fe-e730-4364-8445-dc5a05ad2b0f" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-notification-server" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_HOST", - "valueFrom": { - "configMapKeyRef": { - "key": "maserNotificationServer", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_ATTRIBUTES", - "value": "customerGUID" - }, - { - "name": "CA_NOTIFICATION_SERVER_WS_PORT", - "value": "8001" - }, - { - "name": "CA_NOTIFICATION_SERVER_PORT", - "value": "8002" - } - ], - "image": "quay.io/armosec/notification-server-ubi:89", - "imagePullPolicy": "Always", - "name": "ca-notification-server", - "ports": [ - { - "containerPort": 8001, - "name": "websocket", - "protocol": "TCP" - }, - { - "containerPort": 8002, - "name": "rest-api", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "50Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:11Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:59Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "ReplicaSet \"ca-notification-server-6fd966c875\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - }, - "exception": { - "guid": "5856164c-c93c-4111-866a-dc7545e89211", - "name": "exception_C-0017_cyberarmor-system_2fd1eec2eb2183473233d907900d9dfb", - "attributes": { - "namespaceOnly": "true" - }, - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-13T13:03:11.099594", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "namespace": "cyberarmor-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Immutable container filesystem", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "container :ca-ocimage in Deployment: ca-ocimage has mutable filesystem", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-ocimage\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-ocimage\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-ocimage:63\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-ocimage\",\"ports\":[{\"containerPort\":8080,\"name\":\"ca-ocimage-port\"}],\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:51Z", - "generation": 1, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-ocimage\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:04Z" - } - ], - "name": "ca-ocimage", - "namespace": "cyberarmor-system", - "resourceVersion": "60786986", - "uid": "a6d37edf-b144-4677-91b3-73c73d9c7df6" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-ocimage" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-ocimage:63", - "imagePullPolicy": "Always", - "name": "ca-ocimage", - "ports": [ - { - "containerPort": 8080, - "name": "ca-ocimage-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "1", - "memory": "1000Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:04Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:51Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "ReplicaSet \"ca-ocimage-5576ff7d7d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - }, - "exception": { - "guid": "5856164c-c93c-4111-866a-dc7545e89211", - "name": "exception_C-0017_cyberarmor-system_2fd1eec2eb2183473233d907900d9dfb", - "attributes": { - "namespaceOnly": "true" - }, - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-13T13:03:11.099594", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "namespace": "cyberarmor-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Immutable container filesystem", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "container :ca-oracle in Deployment: ca-oracle has mutable filesystem", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-oracle\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-oracle\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_ORACLE_PORT\",\"value\":\"4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8002\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-oracle-ubi:11\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-oracle\",\"ports\":[{\"containerPort\":4000,\"name\":\"ca-oracle\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:19:01Z", - "generation": 1, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-oracle\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:19:01Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-oracle", - "namespace": "cyberarmor-system", - "resourceVersion": "60787203", - "uid": "da3dd21c-bf13-4d2a-97da-ca80b94d08d3" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-oracle" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_ORACLE_PORT", - "value": "4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8002" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-oracle-ubi:11", - "imagePullPolicy": "Always", - "name": "ca-oracle", - "ports": [ - { - "containerPort": 4000, - "name": "ca-oracle", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:19:01Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-oracle-6c98c6bdbf\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - }, - "exception": { - "guid": "5856164c-c93c-4111-866a-dc7545e89211", - "name": "exception_C-0017_cyberarmor-system_2fd1eec2eb2183473233d907900d9dfb", - "attributes": { - "namespaceOnly": "true" - }, - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-13T13:03:11.099594", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "namespace": "cyberarmor-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Immutable container filesystem", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "container :ca-posture in Deployment: ca-posture has mutable filesystem", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-posture\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-posture\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8001\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-posture-ubi:112\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-posture\",\"ports\":[{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/resources/config\",\"name\":\"ca-posture-score-config\",\"readOnly\":false},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"},{\"configMap\":{\"items\":[{\"key\":\"resourcesdict.json\",\"path\":\"resourcesdict.json\"},{\"key\":\"frameworkdict.json\",\"path\":\"frameworkdict.json\"}],\"name\":\"ca-posture-score-config\"},\"name\":\"ca-posture-score-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:58Z", - "generation": 1, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-posture\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/resources/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-posture-score-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:58Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:45Z" - } - ], - "name": "ca-posture", - "namespace": "cyberarmor-system", - "resourceVersion": "60787259", - "uid": "f41f4dc1-cfb0-4201-bca7-f1cf0b72b6b7" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-posture" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8001" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-posture-ubi:112", - "imagePullPolicy": "Always", - "name": "ca-posture", - "ports": [ - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "500m", - "memory": "100Mi" - }, - "requests": { - "cpu": "100m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/resources/config", - "name": "ca-posture-score-config" - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "resourcesdict.json", - "path": "resourcesdict.json" - }, - { - "key": "frameworkdict.json", - "path": "frameworkdict.json" - } - ], - "name": "ca-posture-score-config" - }, - "name": "ca-posture-score-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:45Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:58Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "ReplicaSet \"ca-posture-5996968d7b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - }, - "exception": { - "guid": "5856164c-c93c-4111-866a-dc7545e89211", - "name": "exception_C-0017_cyberarmor-system_2fd1eec2eb2183473233d907900d9dfb", - "attributes": { - "namespaceOnly": "true" - }, - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-13T13:03:11.099594", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "namespace": "cyberarmor-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Immutable container filesystem", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "container :ca-rbac in Deployment: ca-rbac has mutable filesystem", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-rbac\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-rbac\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"S3_BUCKET\",\"value\":\"ca-kubernetes-rbac-db-dev\"},{\"name\":\"AWS_REGION\",\"value\":\"eu-west-1\"},{\"name\":\"AWS_ACCESS_KEY_ID\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keyid\",\"name\":\"ca-rbac\"}}},{\"name\":\"AWS_SECRET_ACCESS_KEY\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keysecret\",\"name\":\"ca-rbac\"}}}],\"image\":\"quay.io/armosec/k8s-ca-rbac-scanner-ubi:20\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-rbac\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"400Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:50Z", - "generation": 1, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-rbac\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AWS_ACCESS_KEY_ID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"AWS_REGION\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"AWS_SECRET_ACCESS_KEY\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"S3_BUCKET\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:13Z" - } - ], - "name": "ca-rbac", - "namespace": "cyberarmor-system", - "resourceVersion": "60787051", - "uid": "d5898a09-2489-4254-b210-0725ddb2427a" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-rbac" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "S3_BUCKET", - "value": "ca-kubernetes-rbac-db-dev" - }, - { - "name": "AWS_REGION", - "value": "eu-west-1" - }, - { - "name": "AWS_ACCESS_KEY_ID", - "valueFrom": { - "secretKeyRef": { - "key": "keyid", - "name": "ca-rbac" - } - } - }, - { - "name": "AWS_SECRET_ACCESS_KEY", - "valueFrom": { - "secretKeyRef": { - "key": "keysecret", - "name": "ca-rbac" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-rbac-scanner-ubi:20", - "imagePullPolicy": "Always", - "name": "ca-rbac", - "resources": { - "limits": { - "cpu": "200m", - "memory": "400Mi" - }, - "requests": { - "cpu": "10m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:13Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:50Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "ReplicaSet \"ca-rbac-75c8cfd6b4\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - }, - "exception": { - "guid": "5856164c-c93c-4111-866a-dc7545e89211", - "name": "exception_C-0017_cyberarmor-system_2fd1eec2eb2183473233d907900d9dfb", - "attributes": { - "namespaceOnly": "true" - }, - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-13T13:03:11.099594", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "namespace": "cyberarmor-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Immutable container filesystem", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "container :ca-vuln-scan in Deployment: ca-vuln-scan has mutable filesystem", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-vuln-scan\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-vuln-scan\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"EVENT_RECEIVER_URL\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\",\"value\":\"4\"}],\"image\":\"quay.io/armosec/k8s-ca-vuln-scan-ubi:84\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-vuln-scan\",\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1.5Gi\"},\"requests\":{\"cpu\":\"500m\",\"memory\":\"1Gi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:47Z", - "generation": 1, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-vuln-scan\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EVENT_RECEIVER_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:00Z" - } - ], - "name": "ca-vuln-scan", - "namespace": "cyberarmor-system", - "resourceVersion": "60786938", - "uid": "9ea3d6cb-c6c0-423f-aab2-630827939285" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-vuln-scan" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "EVENT_RECEIVER_URL", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_MAX_VULN_SCAN_ROUTINS", - "value": "4" - } - ], - "image": "quay.io/armosec/k8s-ca-vuln-scan-ubi:84", - "imagePullPolicy": "Always", - "name": "ca-vuln-scan", - "resources": { - "limits": { - "cpu": "1", - "memory": "1536Mi" - }, - "requests": { - "cpu": "500m", - "memory": "1Gi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:00Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:47Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "ReplicaSet \"ca-vuln-scan-75b499df8c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - }, - "exception": { - "guid": "5856164c-c93c-4111-866a-dc7545e89211", - "name": "exception_C-0017_cyberarmor-system_2fd1eec2eb2183473233d907900d9dfb", - "attributes": { - "namespaceOnly": "true" - }, - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-13T13:03:11.099594", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "namespace": "cyberarmor-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Immutable container filesystem", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "container :ca-webhook in Deployment: ca-webhook has mutable filesystem", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-webhook\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-webhook\"}},\"template\":{\"metadata\":{\"annotations\":{\"certificate\":\"d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt\"},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-tlsCertFile=/etc/webhook/certs/tls.crt\",\"-tlsKeyFile=/etc/webhook/certs/tls.key\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_WEBHOOK_NAME\",\"value\":\"ca-webhook\"},{\"name\":\"CA_WEBHOOK_PORT\",\"value\":\"443\"},{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_LOGIN_SECRET_NAME\",\"value\":\"ca-login\"},{\"name\":\"CA_ORACLE_SERVER\",\"value\":\"http://ca-oracle:4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"http://ca-notification-server:8001\"},{\"name\":\"CA_OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-webhook-ubi:606\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-webhook\",\"ports\":[{\"containerPort\":443,\"name\":\"mutating-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"600Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"100Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/cazips\",\"name\":\"zip-download\"},{\"mountPath\":\"/etc/webhook/certs\",\"name\":\"ca-cluster-certificate\",\"readOnly\":true},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"emptyDir\":{},\"name\":\"zip-download\"},{\"name\":\"ca-cluster-certificate\",\"secret\":{\"secretName\":\"ca-cluster-certificate\"}},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:46Z", - "generation": 1, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:certificate": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-webhook\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_LOGIN_SECRET_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/cazips\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/webhook/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-cluster-certificate\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"zip-download\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:16Z" - } - ], - "name": "ca-webhook", - "namespace": "cyberarmor-system", - "resourceVersion": "60787072", - "uid": "c968fe90-8480-471f-bdf1-fa98447ce1d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-webhook" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "certificate": "d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt" - }, - "creationTimestamp": null, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-tlsCertFile=/etc/webhook/certs/tls.crt", - "-tlsKeyFile=/etc/webhook/certs/tls.key", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_WEBHOOK_NAME", - "value": "ca-webhook" - }, - { - "name": "CA_WEBHOOK_PORT", - "value": "443" - }, - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_LOGIN_SECRET_NAME", - "value": "ca-login" - }, - { - "name": "CA_ORACLE_SERVER", - "value": "http://ca-oracle:4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "http://ca-notification-server:8001" - }, - { - "name": "CA_OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-webhook-ubi:606", - "imagePullPolicy": "Always", - "name": "ca-webhook", - "ports": [ - { - "containerPort": 443, - "name": "mutating-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "600Mi" - }, - "requests": { - "cpu": "300m", - "memory": "100Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/cazips", - "name": "zip-download" - }, - { - "mountPath": "/etc/webhook/certs", - "name": "ca-cluster-certificate", - "readOnly": true - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "emptyDir": {}, - "name": "zip-download" - }, - { - "name": "ca-cluster-certificate", - "secret": { - "defaultMode": 420, - "secretName": "ca-cluster-certificate" - } - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:16Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:46Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "ReplicaSet \"ca-webhook-7dd8bbd798\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - }, - "exception": { - "guid": "5856164c-c93c-4111-866a-dc7545e89211", - "name": "exception_C-0017_cyberarmor-system_2fd1eec2eb2183473233d907900d9dfb", - "attributes": { - "namespaceOnly": "true" - }, - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-13T13:03:11.099594", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "namespace": "cyberarmor-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Immutable container filesystem", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "container :ca-websocket in Deployment: ca-websocket has mutable filesystem", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-websocket\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-websocket\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_VULN_SCAN_SCHEDULE\",\"value\":\"@every 11h\"},{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\",\"value\":\"@every 12h\"},{\"name\":\"CA_DEBUG_SIGNER\",\"value\":null}],\"image\":\"quay.io/armosec/k8s-ca-websocket-ubi:406\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-websocket\",\"ports\":[{\"containerPort\":4002,\"name\":\"trigger-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:43Z", - "generation": 1, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-websocket\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_DEBUG_SIGNER\"}": { - ".": {}, - "f:name": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_VULN_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:14Z" - } - ], - "name": "ca-websocket", - "namespace": "cyberarmor-system", - "resourceVersion": "60787065", - "uid": "914f30e9-d858-4945-9314-cbd3422ebaab" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-websocket" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_VULN_SCAN_SCHEDULE", - "value": "@every 11h" - }, - { - "name": "CA_POSTURE_SCAN_SCHEDULE", - "value": "@every 12h" - }, - { - "name": "CA_DEBUG_SIGNER" - } - ], - "image": "quay.io/armosec/k8s-ca-websocket-ubi:406", - "imagePullPolicy": "Always", - "name": "ca-websocket", - "ports": [ - { - "containerPort": 4002, - "name": "trigger-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "1000Mi" - }, - "requests": { - "cpu": "300m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:14Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:43Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "ReplicaSet \"ca-websocket-857758846f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - }, - "exception": { - "guid": "5856164c-c93c-4111-866a-dc7545e89211", - "name": "exception_C-0017_cyberarmor-system_2fd1eec2eb2183473233d907900d9dfb", - "attributes": { - "namespaceOnly": "true" - }, - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-13T13:03:11.099594", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "namespace": "cyberarmor-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Immutable container filesystem", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "container :server in Deployment: adservice has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"adservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"adservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"adservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/adservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"name\":\"server\",\"ports\":[{\"containerPort\":9555}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"180Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:51Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":9555,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:12Z" - } - ], - "name": "adservice", - "namespace": "hipster", - "resourceVersion": "61263240", - "uid": "368bea36-82be-4c28-8607-cf931a836185" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "adservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6415784d-d96b-4866-9c10-d571c8d8fd35", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:29", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-adservice" - }, - "creationTimestamp": null, - "labels": { - "app": "adservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/adservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 9555, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "300Mi" - }, - "requests": { - "cpu": "200m", - "memory": "180Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:24Z", - "lastUpdateTime": "2021-10-12T00:12:24Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:51Z", - "lastUpdateTime": "2021-10-13T00:28:12Z", - "message": "ReplicaSet \"adservice-7864446d5c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "container :server in Deployment: cartservice has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"cartservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"cartservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"cartservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"REDIS_ADDR\",\"value\":\"redis-cart:6379\"}],\"image\":\"gcr.io/google-samples/microservices-demo/cartservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15,\"periodSeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":7070}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:47Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"REDIS_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7070,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T09:40:08Z" - } - ], - "name": "cartservice", - "namespace": "hipster", - "resourceVersion": "61443544", - "uid": "df767287-ffc1-4559-b7fd-32b09bf6208c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "cartservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "7ced7c5c-c483-40b3-b6bc-8829339dc3e1", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:04", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-cartservice" - }, - "creationTimestamp": null, - "labels": { - "app": "cartservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "REDIS_ADDR", - "value": "redis-cart:6379" - } - ], - "image": "gcr.io/google-samples/microservices-demo/cartservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7070, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "128Mi" - }, - "requests": { - "cpu": "200m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-13T00:27:35Z", - "message": "ReplicaSet \"cartservice-7c8f8f9ddd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T09:40:08Z", - "lastUpdateTime": "2021-10-13T09:40:08Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "container :server in Deployment: checkoutservice has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"checkoutservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"checkoutservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"checkoutservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"5050\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"PAYMENT_SERVICE_ADDR\",\"value\":\"paymentservice:50051\"},{\"name\":\"EMAIL_SERVICE_ADDR\",\"value\":\"emailservice:5000\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"}],\"image\":\"gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":5050}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:42Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EMAIL_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PAYMENT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":5050,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:42Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:41Z" - } - ], - "name": "checkoutservice", - "namespace": "hipster", - "resourceVersion": "61262985", - "uid": "b5e6a8d8-1ec6-4acc-bf14-e3bb28bff284" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "checkoutservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "bebad8bb-8728-4813-ae19-d22a38a289a5", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:28", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-checkoutservice" - }, - "creationTimestamp": null, - "labels": { - "app": "checkoutservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "5050" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "PAYMENT_SERVICE_ADDR", - "value": "paymentservice:50051" - }, - { - "name": "EMAIL_SERVICE_ADDR", - "value": "emailservice:5000" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - } - ], - "image": "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 5050, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T14:05:32Z", - "lastUpdateTime": "2021-10-12T14:05:32Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:42Z", - "lastUpdateTime": "2021-10-13T00:27:42Z", - "message": "ReplicaSet \"checkoutservice-86c564466c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "container :server in Deployment: currencyservice has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"currencyservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"currencyservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"currencyservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"7000\"}],\"image\":\"gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":7000,\"name\":\"grpc\"}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T08:37:54Z" - } - ], - "name": "currencyservice", - "namespace": "hipster", - "resourceVersion": "61423238", - "uid": "167b75e1-1be2-4764-aaad-dbb1ae248d3c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "currencyservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "4aa34494-0348-4859-9e29-56df9baf52ba", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-currencyservice" - }, - "creationTimestamp": null, - "labels": { - "app": "currencyservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "7000" - } - ], - "image": "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7000, - "name": "grpc", - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:29:19Z", - "message": "ReplicaSet \"currencyservice-544b6d849c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T08:37:54Z", - "lastUpdateTime": "2021-10-13T08:37:54Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "container :server in Deployment: emailservice has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"emailservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"emailservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"emailservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"DISABLE_PROFILER\",\"value\":\"1\"}],\"image\":\"gcr.io/google-samples/microservices-demo/emailservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:41Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"DISABLE_PROFILER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:41Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:07Z" - } - ], - "name": "emailservice", - "namespace": "hipster", - "resourceVersion": "61263204", - "uid": "9959433f-c964-4e6d-a2d7-3d1b9b617948" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "emailservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "e8aa9826-2367-44e1-9aad-a6d617b0fa06", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:48", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-emailservice" - }, - "creationTimestamp": null, - "labels": { - "app": "emailservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "DISABLE_PROFILER", - "value": "1" - } - ], - "image": "gcr.io/google-samples/microservices-demo/emailservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-12T00:11:47Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:41Z", - "lastUpdateTime": "2021-10-13T00:28:08Z", - "message": "ReplicaSet \"emailservice-cc7c4cd87\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "container :server in Deployment: frontend has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"frontend\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"frontend\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"frontend\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"},{\"name\":\"RECOMMENDATION_SERVICE_ADDR\",\"value\":\"recommendationservice:8080\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"CHECKOUT_SERVICE_ADDR\",\"value\":\"checkoutservice:5050\"},{\"name\":\"AD_SERVICE_ADDR\",\"value\":\"adservice:9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/frontend:v0.2.3\",\"livenessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-liveness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-readiness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:44Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AD_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CHECKOUT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"RECOMMENDATION_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:44Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:34Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:22Z" - } - ], - "name": "frontend", - "namespace": "hipster", - "resourceVersion": "61263336", - "uid": "86b92d9e-22ad-4f0a-be26-41343f05f0d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "frontend" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9611f05f-4a8b-48ff-9722-e6a2ec702d65", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:57", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-frontend", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "frontend", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - }, - { - "name": "RECOMMENDATION_SERVICE_ADDR", - "value": "recommendationservice:8080" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "CHECKOUT_SERVICE_ADDR", - "value": "checkoutservice:5050" - }, - { - "name": "AD_SERVICE_ADDR", - "value": "adservice:9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/frontend:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-liveness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-readiness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:04Z", - "lastUpdateTime": "2021-10-12T00:12:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:44Z", - "lastUpdateTime": "2021-10-13T00:28:23Z", - "message": "ReplicaSet \"frontend-c747f6f47\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "container :main in Deployment: loadgenerator has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"loadgenerator\",\"namespace\":\"hipster\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"loadgenerator\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"loadgenerator\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"FRONTEND_ADDR\",\"value\":\"frontend:80\"},{\"name\":\"USERS\",\"value\":\"10\"}],\"image\":\"gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3\",\"name\":\"main\",\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"256Mi\"}}}],\"restartPolicy\":\"Always\",\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"main\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"FRONTEND_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"USERS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:38Z" - } - ], - "name": "loadgenerator", - "namespace": "hipster", - "resourceVersion": "61263451", - "uid": "e9200650-d25d-43f2-b1bc-4615beaed50c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "loadgenerator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "baca3d0f-fdc8-42c6-a9b1-ee29b3d173e0", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:26", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-loadgenerator", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "loadgenerator", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "FRONTEND_ADDR", - "value": "frontend:80" - }, - { - "name": "USERS", - "value": "10" - } - ], - "image": "gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "name": "main", - "resources": { - "limits": { - "cpu": "500m", - "memory": "512Mi" - }, - "requests": { - "cpu": "300m", - "memory": "256Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-13T00:24:15Z", - "lastUpdateTime": "2021-10-13T00:24:15Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:28:38Z", - "message": "ReplicaSet \"loadgenerator-6dcb6ffc4f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "container :server in Deployment: paymentservice has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"paymentservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"paymentservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"paymentservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:45Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:45Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:29:27Z" - } - ], - "name": "paymentservice", - "namespace": "hipster", - "resourceVersion": "61263785", - "uid": "ab21c30f-d153-4ea8-982e-e12a71745dae" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "paymentservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "60b5720d-99b5-47a0-8bc4-656b372a6d17", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:52", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-paymentservice" - }, - "creationTimestamp": null, - "labels": { - "app": "paymentservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:45Z", - "lastUpdateTime": "2021-10-13T00:29:27Z", - "message": "ReplicaSet \"paymentservice-849b876ffd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "container :server in Deployment: productcatalogservice has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"productcatalogservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"productcatalogservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"productcatalogservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":3550}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:46Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":3550,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:57Z" - } - ], - "name": "productcatalogservice", - "namespace": "hipster", - "resourceVersion": "61263117", - "uid": "50b29b6e-0f97-43b8-9555-a53d9c0e18f9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "productcatalogservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9bb4cc06-3907-401b-919f-c2974a623068", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-productcatalogservice" - }, - "creationTimestamp": null, - "labels": { - "app": "productcatalogservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 3550, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:46Z", - "lastUpdateTime": "2021-10-13T00:27:57Z", - "message": "ReplicaSet \"productcatalogservice-586fd876d5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "container :server in Deployment: recommendationservice has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"recommendationservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"recommendationservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"recommendationservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"450Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"220Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:43Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:37Z" - } - ], - "name": "recommendationservice", - "namespace": "hipster", - "resourceVersion": "61263443", - "uid": "00437f28-24c4-4759-ab93-f0be948eabc9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "recommendationservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "8cace306-b3ce-4f2f-8a6f-b122873b4eee", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-recommendationservice" - }, - "creationTimestamp": null, - "labels": { - "app": "recommendationservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "450Mi" - }, - "requests": { - "cpu": "100m", - "memory": "220Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-12T00:11:50Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:43Z", - "lastUpdateTime": "2021-10-13T00:28:37Z", - "message": "ReplicaSet \"recommendationservice-54b7b7b95d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "container :redis in Deployment: redis-cart has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"redis-cart\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"redis-cart\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"redis-cart\"}},\"spec\":{\"containers\":[{\"image\":\"redis:alpine\",\"livenessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"name\":\"redis\",\"ports\":[{\"containerPort\":6379}],\"readinessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"resources\":{\"limits\":{\"cpu\":\"125m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"70m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/data\",\"name\":\"redis-data\"}]}],\"volumes\":[{\"emptyDir\":{},\"name\":\"redis-data\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:50Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"redis\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":6379,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/data\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"redis-data\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:38Z" - } - ], - "name": "redis-cart", - "namespace": "hipster", - "resourceVersion": "61262948", - "uid": "76b3aebb-9ec5-479e-81ae-975ccf1bc6ec" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "redis-cart" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "838a7c21-618b-4693-a13b-838a9231ca58", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-redis-cart" - }, - "creationTimestamp": null, - "labels": { - "app": "redis-cart", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "image": "redis:alpine", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "name": "redis", - "ports": [ - { - "containerPort": 6379, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "125m", - "memory": "256Mi" - }, - "requests": { - "cpu": "70m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/data", - "name": "redis-data" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "emptyDir": {}, - "name": "redis-data" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:57Z", - "lastUpdateTime": "2021-10-12T00:11:57Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-13T00:27:38Z", - "message": "ReplicaSet \"redis-cart-594778c8b9\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "container :server in Deployment: shippingservice has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"shippingservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"shippingservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"shippingservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:49Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:49Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:11Z" - } - ], - "name": "shippingservice", - "namespace": "hipster", - "resourceVersion": "61262726", - "uid": "febd2fe5-0e28-448e-aabd-31904ebb82a9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "shippingservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6503b850-839c-4b73-95ab-195d27b3c10d", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:26:58", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-shippingservice" - }, - "creationTimestamp": null, - "labels": { - "app": "shippingservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:00Z", - "lastUpdateTime": "2021-10-12T00:12:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:49Z", - "lastUpdateTime": "2021-10-13T00:27:11Z", - "message": "ReplicaSet \"shippingservice-758c9b4d4b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "container :dnsmasq in Deployment: kube-dns has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":\"10%\",\"maxUnavailable\":0}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"kubedns\",\"prometheus.io/port\":\"10054\",\"prometheus.io/scrape\":\"true\",\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"labels\":{\"k8s-app\":\"kube-dns\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchExpressions\":[{\"key\":\"k8s-app\",\"operator\":\"In\",\"values\":[\"kube-dns\"]}]},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"--domain=cluster.local.\",\"--dns-port=10053\",\"--config-dir=/kube-dns-config\",\"--v=2\"],\"env\":[{\"name\":\"PROMETHEUS_PORT\",\"value\":\"10055\"}],\"image\":\"gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/kubedns\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"kubedns\",\"ports\":[{\"containerPort\":10053,\"name\":\"dns-local\",\"protocol\":\"UDP\"},{\"containerPort\":10053,\"name\":\"dns-tcp-local\",\"protocol\":\"TCP\"},{\"containerPort\":10055,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readiness\",\"port\":8081,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":3,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"memory\":\"210Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"70Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001},\"volumeMounts\":[{\"mountPath\":\"/kube-dns-config\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"-v=2\",\"-logtostderr\",\"-configDir=/etc/k8s/dns/dnsmasq-nanny\",\"-restartDnsmasq=true\",\"--\",\"-k\",\"--cache-size=1000\",\"--no-negcache\",\"--dns-forward-max=1500\",\"--log-facility=-\",\"--server=/cluster.local/127.0.0.1#10053\",\"--server=/in-addr.arpa/127.0.0.1#10053\",\"--server=/ip6.arpa/127.0.0.1#10053\"],\"image\":\"gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/dnsmasq\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"dnsmasq\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"150m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"capabilities\":{\"add\":[\"NET_BIND_SERVICE\",\"SETGID\"],\"drop\":[\"all\"]}},\"volumeMounts\":[{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"--v=2\",\"--logtostderr\",\"--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV\",\"--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV\"],\"image\":\"gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/metrics\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"sidecar\",\"ports\":[{\"containerPort\":10054,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001}}],\"dnsPolicy\":\"Default\",\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 4, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:scheduler.alpha.kubernetes.io/critical-pod": {}, - "f:seccomp.security.alpha.kubernetes.io/pod": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:podAntiAffinity": { - ".": {}, - "f:preferredDuringSchedulingIgnoredDuringExecution": {} - } - }, - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:capabilities": { - ".": {}, - "f:add": {}, - "f:drop": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"kubedns\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PROMETHEUS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10053,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10053,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10055,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/kube-dns-config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"sidecar\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10054,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - "f:image": {} - }, - "k:{\"name\":\"kubedns\"}": { - "f:image": {} - }, - "k:{\"name\":\"sidecar\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:06:26Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "53109905", - "uid": "cd5cca24-7cd2-4548-a5d3-d90beb79f9e8" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 2, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "10%", - "maxUnavailable": 0 - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "kubedns", - "prometheus.io/port": "10054", - "prometheus.io/scrape": "true", - "scheduler.alpha.kubernetes.io/critical-pod": "", - "seccomp.security.alpha.kubernetes.io/pod": "runtime/default" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns" - } - }, - "spec": { - "affinity": { - "podAntiAffinity": { - "preferredDuringSchedulingIgnoredDuringExecution": [ - { - "podAffinityTerm": { - "labelSelector": { - "matchExpressions": [ - { - "key": "k8s-app", - "operator": "In", - "values": [ - "kube-dns" - ] - } - ] - }, - "topologyKey": "kubernetes.io/hostname" - }, - "weight": 100 - } - ] - } - }, - "containers": [ - { - "args": [ - "--domain=cluster.local.", - "--dns-port=10053", - "--config-dir=/kube-dns-config", - "--v=2" - ], - "env": [ - { - "name": "PROMETHEUS_PORT", - "value": "10055" - } - ], - "image": "gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/kubedns", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "kubedns", - "ports": [ - { - "containerPort": 10053, - "name": "dns-local", - "protocol": "UDP" - }, - { - "containerPort": 10053, - "name": "dns-tcp-local", - "protocol": "TCP" - }, - { - "containerPort": 10055, - "name": "metrics", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/readiness", - "port": 8081, - "scheme": "HTTP" - }, - "initialDelaySeconds": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "resources": { - "limits": { - "memory": "210Mi" - }, - "requests": { - "cpu": "100m", - "memory": "70Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/kube-dns-config", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "-v=2", - "-logtostderr", - "-configDir=/etc/k8s/dns/dnsmasq-nanny", - "-restartDnsmasq=true", - "--", - "-k", - "--cache-size=1000", - "--no-negcache", - "--dns-forward-max=1500", - "--log-facility=-", - "--server=/cluster.local/127.0.0.1#10053", - "--server=/in-addr.arpa/127.0.0.1#10053", - "--server=/ip6.arpa/127.0.0.1#10053" - ], - "image": "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/dnsmasq", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "dnsmasq", - "ports": [ - { - "containerPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "150m", - "memory": "20Mi" - } - }, - "securityContext": { - "capabilities": { - "add": [ - "NET_BIND_SERVICE", - "SETGID" - ], - "drop": [ - "all" - ] - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/k8s/dns/dnsmasq-nanny", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "--v=2", - "--logtostderr", - "--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV", - "--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV" - ], - "image": "gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/metrics", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "sidecar", - "ports": [ - { - "containerPort": 10054, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns", - "serviceAccountName": "kube-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 2, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-09-11T01:57:38Z", - "message": "ReplicaSet \"kube-dns-59844ff879\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:06:26Z", - "lastUpdateTime": "2021-09-25T17:06:26Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 4, - "readyReplicas": 2, - "replicas": 2, - "updatedReplicas": 2 - } - } - ] - } - }, - { - "alertMessage": "container :autoscaler in Deployment: kube-dns-autoscaler has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns-autoscaler\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns-autoscaler\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"spec\":{\"containers\":[{\"command\":[\"/cluster-proportional-autoscaler\",\"--namespace=kube-system\",\"--configmap=kube-dns-autoscaler\",\"--target=Deployment/kube-dns\",\"--default-params={\\\"linear\\\":{\\\"coresPerReplica\\\":256,\\\"nodesPerReplica\\\":16,\\\"preventSinglePointFailure\\\":true,\\\"includeUnschedulableNodes\\\":true}}\",\"--logtostderr=true\",\"--v=2\"],\"image\":\"gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0\",\"name\":\"autoscaler\",\"resources\":{\"requests\":{\"cpu\":\"20m\",\"memory\":\"10Mi\"}}}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"seccompProfile\":{\"type\":\"RuntimeDefault\"},\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns-autoscaler\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns-autoscaler", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"autoscaler\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:02:52Z" - } - ], - "name": "kube-dns-autoscaler", - "namespace": "kube-system", - "resourceVersion": "53108562", - "uid": "c84ce079-f3c8-46ba-871f-0f2d42ffee1e" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/cluster-proportional-autoscaler", - "--namespace=kube-system", - "--configmap=kube-dns-autoscaler", - "--target=Deployment/kube-dns", - "--default-params={\"linear\":{\"coresPerReplica\":256,\"nodesPerReplica\":16,\"preventSinglePointFailure\":true,\"includeUnschedulableNodes\":true}}", - "--logtostderr=true", - "--v=2" - ], - "image": "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "autoscaler", - "resources": { - "requests": { - "cpu": "20m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "seccompProfile": { - "type": "RuntimeDefault" - }, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns-autoscaler", - "serviceAccountName": "kube-dns-autoscaler", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:54:39Z", - "message": "ReplicaSet \"kube-dns-autoscaler-844c9d9448\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:02:52Z", - "lastUpdateTime": "2021-09-25T17:02:52Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "container :default-http-backend in Deployment: l7-default-backend has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"glbc\",\"kubernetes.io/cluster-service\":\"true\",\"kubernetes.io/name\":\"GLBC\"},\"name\":\"l7-default-backend\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"glbc\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"glbc\",\"name\":\"glbc\"}},\"spec\":{\"containers\":[{\"image\":\"k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":30,\"timeoutSeconds\":5},\"name\":\"default-http-backend\",\"ports\":[{\"containerPort\":8080}],\"resources\":{\"limits\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}}}],\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"tolerations\":[{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "glbc", - "kubernetes.io/cluster-service": "true", - "kubernetes.io/name": "GLBC" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:kubernetes.io/name": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:name": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"default-http-backend\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:seccompProfile": { - "f:type": {} - } - }, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:01:20Z" - } - ], - "name": "l7-default-backend", - "namespace": "kube-system", - "resourceVersion": "53107969", - "uid": "32a76c03-37a1-44e9-b293-dd6b46ed274b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "glbc" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "glbc", - "name": "glbc" - } - }, - "spec": { - "containers": [ - { - "image": "k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 30, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "default-http-backend", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "10m", - "memory": "20Mi" - }, - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:56:25Z", - "message": "ReplicaSet \"l7-default-backend-56cb9644f6\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:01:20Z", - "lastUpdateTime": "2021-09-25T17:01:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "container :metrics-server in Deployment: metrics-server-v0.3.6 has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "24", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metrics-server\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server-v0.3.6\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server\"},\"spec\":{\"containers\":[{\"command\":[\"/metrics-server\",\"--metric-resolution=30s\",\"--kubelet-port=10255\",\"--deprecated-kubelet-completely-insecure=true\",\"--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP\"],\"image\":\"k8s.gcr.io/metrics-server-amd64:v0.3.6\",\"name\":\"metrics-server\",\"ports\":[{\"containerPort\":443,\"name\":\"https\",\"protocol\":\"TCP\"}]},{\"command\":[\"/pod_nanny\",\"--config-dir=/etc/config\",\"--cpu=40m\",\"--extra-cpu=0.5m\",\"--memory=35Mi\",\"--extra-memory=4Mi\",\"--threshold=5\",\"--deployment=metrics-server-v0.3.6\",\"--container=metrics-server\",\"--poll-period=300000\",\"--estimator=exponential\",\"--scale-down-delay=24h\",\"--minClusterSize=5\",\"--use-metrics=true\"],\"env\":[{\"name\":\"MY_POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"MY_POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"gke.gcr.io/addon-resizer:1.8.11-gke.0\",\"name\":\"metrics-server-nanny\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"5m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"metrics-server-config-volume\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"metrics-server\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"metrics-server-config\"},\"name\":\"metrics-server-config-volume\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 24, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metrics-server", - "kubernetes.io/cluster-service": "true", - "version": "v0.3.6" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:version": {} - }, - "f:name": {} - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - }, - "k:{\"name\":\"metrics-server-nanny\"}": { - ".": {}, - "f:command": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"MY_POD_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"MY_POD_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"metrics-server-config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - "f:resources": { - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - } - } - } - } - } - } - }, - "manager": "pod_nanny", - "operation": "Update", - "time": "2021-06-13T13:42:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-26T17:13:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-26T17:13:52Z" - } - ], - "name": "metrics-server-v0.3.6", - "namespace": "kube-system", - "resourceVersion": "53582788", - "uid": "872d0f34-7998-45d3-9eea-570e0a47e03c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - }, - "name": "metrics-server" - }, - "spec": { - "containers": [ - { - "command": [ - "/metrics-server", - "--metric-resolution=30s", - "--kubelet-port=10255", - "--deprecated-kubelet-completely-insecure=true", - "--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP" - ], - "image": "k8s.gcr.io/metrics-server-amd64:v0.3.6", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server", - "ports": [ - { - "containerPort": 443, - "name": "https", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "44m", - "memory": "63Mi" - }, - "requests": { - "cpu": "44m", - "memory": "63Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - }, - { - "command": [ - "/pod_nanny", - "--config-dir=/etc/config", - "--cpu=40m", - "--extra-cpu=0.5m", - "--memory=35Mi", - "--extra-memory=4Mi", - "--threshold=5", - "--deployment=metrics-server-v0.3.6", - "--container=metrics-server", - "--poll-period=300000", - "--estimator=exponential", - "--scale-down-delay=24h", - "--minClusterSize=5", - "--use-metrics=true" - ], - "env": [ - { - "name": "MY_POD_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.name" - } - } - }, - { - "name": "MY_POD_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - } - ], - "image": "gke.gcr.io/addon-resizer:1.8.11-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server-nanny", - "resources": { - "limits": { - "cpu": "100m", - "memory": "300Mi" - }, - "requests": { - "cpu": "5m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "metrics-server-config-volume" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "serviceAccount": "metrics-server", - "serviceAccountName": "metrics-server", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "metrics-server-config" - }, - "name": "metrics-server-config-volume" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-09-25T17:12:33Z", - "lastUpdateTime": "2021-09-25T17:12:33Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-06-13T13:42:20Z", - "lastUpdateTime": "2021-09-26T17:13:52Z", - "message": "ReplicaSet \"metrics-server-v0.3.6-7889654bbb\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 24, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "container :gce-pd-driver in DaemonSet: pdcsi-node-windows has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - } - ] - } - }, - { - "alertMessage": "container :kube-proxy in DaemonSet: kube-proxy has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "6", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-proxy\"},\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-proxy\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-proxy\"}},\"spec\":{\"containers\":[{\"command\":[\"/bin/sh\",\"-c\",\"kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\\u003e\\u003e/var/log/kube-proxy.log 2\\u003e\\u00261\"],\"env\":[{\"name\":\"KUBERNETES_SERVICE_HOST\",\"value\":\"34.78.97.243\"}],\"image\":\"gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001\",\"name\":\"kube-proxy\",\"resources\":{\"requests\":{\"cpu\":\"100m\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/log\",\"name\":\"varlog\",\"readOnly\":false},{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/lib/modules\",\"name\":\"lib-modules\",\"readOnly\":true}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\",\"node.kubernetes.io/kube-proxy-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"kube-proxy\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/log\"},\"name\":\"varlog\"},{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"hostPath\":{\"path\":\"/lib/modules\"},\"name\":\"lib-modules\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "generation": 6, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-proxy" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBERNETES_SERVICE_HOST\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/kube-proxy-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - "f:command": {}, - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:44Z" - } - ], - "name": "kube-proxy", - "namespace": "kube-system", - "resourceVersion": "52161714", - "uid": "bb6f9ab0-e586-407b-95c0-773637c696e8" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-proxy" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-proxy" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "env": [ - { - "name": "KUBERNETES_SERVICE_HOST", - "value": "34.78.97.243" - } - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux", - "node.kubernetes.io/kube-proxy-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "kube-proxy", - "serviceAccountName": "kube-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 6 - } - } - ] - } - }, - { - "alertMessage": "container :metadata-proxy in DaemonSet: metadata-proxy-v0.1 has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"},\"name\":\"metadata-proxy-v0.1\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metadata-proxy\",\"version\":\"v0.1\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"}},\"spec\":{\"containers\":[{\"args\":[\"--addr=0.0.0.0:988\"],\"image\":\"k8s.gcr.io/metadata-proxy:v0.1.12\",\"name\":\"metadata-proxy\",\"resources\":{\"limits\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"},\"requests\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"}},\"securityContext\":{\"privileged\":true}}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"cloud.google.com/metadata-proxy-ready\":\"true\",\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"metadata-proxy\",\"terminationGracePeriodSeconds\":30,\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 3, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:cloud.google.com/metadata-proxy-ready": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - "f:args": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - } - ], - "name": "metadata-proxy-v0.1", - "namespace": "kube-system", - "resourceVersion": "25934435", - "uid": "94bf5845-f77b-47d4-bcec-e78549b4d8a3" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metadata-proxy", - "version": "v0.1" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--addr=0.0.0.0:988" - ], - "image": "k8s.gcr.io/metadata-proxy:v0.1.12", - "imagePullPolicy": "IfNotPresent", - "name": "metadata-proxy", - "resources": { - "limits": { - "cpu": "30m", - "memory": "25Mi" - }, - "requests": { - "cpu": "30m", - "memory": "25Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "cloud.google.com/metadata-proxy-ready": "true", - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "metadata-proxy", - "serviceAccountName": "metadata-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 3 - } - } - ] - } - }, - { - "alertMessage": "container :node-cache in DaemonSet: node-local-dns has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"node-local-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"node-local-dns\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"nodelocaldns\",\"components.gke.io/component-version\":\"1.4.0\",\"prometheus.io/port\":\"9253\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"k8s-app\":\"node-local-dns\"}},\"spec\":{\"containers\":[{\"args\":[\"-localip\",\"169.254.20.10,10.72.0.10\",\"-conf\",\"/etc/Corefile\",\"-upstreamsvc\",\"kube-dns-upstream\",\"-kubednscm\",\"/etc/kube-dns\"],\"image\":\"gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1\",\"livenessProbe\":{\"httpGet\":{\"host\":\"169.254.20.10\",\"path\":\"/health\",\"port\":8080},\"initialDelaySeconds\":60,\"timeoutSeconds\":5},\"name\":\"node-cache\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"},{\"containerPort\":9253,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"25m\",\"memory\":\"5Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/etc/coredns\",\"name\":\"config-volume\"},{\"mountPath\":\"/etc/kube-dns\",\"name\":\"kube-dns-config\"}]}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"addon.gke.io/node-local-dns-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"node-local-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"},{\"configMap\":{\"items\":[{\"key\":\"Corefile\",\"path\":\"Corefile.base\"}],\"name\":\"node-local-dns\"},\"name\":\"config-volume\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"}}}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "node-local-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:host": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":9253,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/coredns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/kube-dns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:addon.gke.io/node-local-dns-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "53114241", - "uid": "5069e9ba-0784-41bf-9577-3757bcb3b6d6" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "node-local-dns" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "nodelocaldns", - "components.gke.io/component-version": "1.4.0", - "prometheus.io/port": "9253", - "prometheus.io/scrape": "true" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "node-local-dns" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-localip", - "169.254.20.10,10.72.0.10", - "-conf", - "/etc/Corefile", - "-upstreamsvc", - "kube-dns-upstream", - "-kubednscm", - "/etc/kube-dns" - ], - "image": "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "host": "169.254.20.10", - "path": "/health", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "node-cache", - "ports": [ - { - "containerPort": 53, - "hostPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "hostPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - }, - { - "containerPort": 9253, - "hostPort": 9253, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "25m", - "memory": "5Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/etc/coredns", - "name": "config-volume" - }, - { - "mountPath": "/etc/kube-dns", - "name": "kube-dns-config" - } - ] - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "addon.gke.io/node-local-dns-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "node-local-dns", - "serviceAccountName": "node-local-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "Corefile", - "path": "Corefile.base" - } - ], - "name": "node-local-dns" - }, - "name": "config-volume" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 2, - "updatedNumberScheduled": 7 - } - } - ] - } - }, - { - "alertMessage": "container :nvidia-gpu-device-plugin in DaemonSet: nvidia-gpu-device-plugin has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"nvidia-gpu-device-plugin\"},\"name\":\"nvidia-gpu-device-plugin\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"cloud.google.com/gke-accelerator\",\"operator\":\"Exists\"}]}]}}},\"containers\":[{\"command\":[\"/usr/bin/nvidia-gpu-device-plugin\",\"-logtostderr\",\"--enable-container-gpu-metrics\",\"--enable-health-monitoring\"],\"env\":[{\"name\":\"LD_LIBRARY_PATH\",\"value\":\"/usr/local/nvidia/lib64\"}],\"image\":\"gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317\",\"name\":\"nvidia-gpu-device-plugin\",\"ports\":[{\"containerPort\":2112,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/device-plugin\",\"name\":\"device-plugin\"},{\"mountPath\":\"/dev\",\"name\":\"dev\"},{\"mountPath\":\"/usr/local/nvidia\",\"name\":\"nvidia\"},{\"mountPath\":\"/var/lib/kubelet/pod-resources\",\"name\":\"pod-resources\"},{\"mountPath\":\"/proc\",\"name\":\"proc\"},{\"mountPath\":\"/etc/nvidia\",\"name\":\"nvidia-config\"}]}],\"priorityClassName\":\"system-node-critical\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/device-plugins\"},\"name\":\"device-plugin\"},{\"hostPath\":{\"path\":\"/dev\"},\"name\":\"dev\"},{\"hostPath\":{\"path\":\"/home/kubernetes/bin/nvidia\",\"type\":\"Directory\"},\"name\":\"nvidia\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/pod-resources\"},\"name\":\"pod-resources\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"proc\"},{\"hostPath\":{\"path\":\"/etc/nvidia\"},\"name\":\"nvidia-config\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:17Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "nvidia-gpu-device-plugin" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:nodeAffinity": { - ".": {}, - "f:requiredDuringSchedulingIgnoredDuringExecution": { - ".": {}, - "f:nodeSelectorTerms": {} - } - } - }, - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"LD_LIBRARY_PATH\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":2112,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/device-plugin\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/local/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet/pod-resources\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"dev\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"device-plugin\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"nvidia\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"pod-resources\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - "f:command": {}, - "f:image": {}, - "f:volumeMounts": { - "k:{\"mountPath\":\"/etc/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/proc\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:volumes": { - "k:{\"name\":\"nvidia-config\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"proc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "nvidia-gpu-device-plugin", - "namespace": "kube-system", - "resourceVersion": "25934477", - "uid": "14396a20-ecee-4671-aefe-2a5b9d2e0dde" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "spec": { - "affinity": { - "nodeAffinity": { - "requiredDuringSchedulingIgnoredDuringExecution": { - "nodeSelectorTerms": [ - { - "matchExpressions": [ - { - "key": "cloud.google.com/gke-accelerator", - "operator": "Exists" - } - ] - } - ] - } - } - }, - "containers": [ - { - "command": [ - "/usr/bin/nvidia-gpu-device-plugin", - "-logtostderr", - "--enable-container-gpu-metrics", - "--enable-health-monitoring" - ], - "env": [ - { - "name": "LD_LIBRARY_PATH", - "value": "/usr/local/nvidia/lib64" - } - ], - "image": "gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317", - "imagePullPolicy": "IfNotPresent", - "name": "nvidia-gpu-device-plugin", - "ports": [ - { - "containerPort": 2112, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "20Mi" - }, - "requests": { - "cpu": "50m", - "memory": "20Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/device-plugin", - "name": "device-plugin" - }, - { - "mountPath": "/dev", - "name": "dev" - }, - { - "mountPath": "/usr/local/nvidia", - "name": "nvidia" - }, - { - "mountPath": "/var/lib/kubelet/pod-resources", - "name": "pod-resources" - }, - { - "mountPath": "/proc", - "name": "proc" - }, - { - "mountPath": "/etc/nvidia", - "name": "nvidia-config" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/device-plugins", - "type": "" - }, - "name": "device-plugin" - }, - { - "hostPath": { - "path": "/dev", - "type": "" - }, - "name": "dev" - }, - { - "hostPath": { - "path": "/home/kubernetes/bin/nvidia", - "type": "Directory" - }, - "name": "nvidia" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/pod-resources", - "type": "" - }, - "name": "pod-resources" - }, - { - "hostPath": { - "path": "/proc", - "type": "" - }, - "name": "proc" - }, - { - "hostPath": { - "path": "/etc/nvidia", - "type": "" - }, - "name": "nvidia-config" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 2 - } - } - ] - } - }, - { - "alertMessage": "container :csi-driver-registrar in DaemonSet: pdcsi-node has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - } - ] - } - }, - { - "alertMessage": "container :csi-driver-registrar in DaemonSet: pdcsi-node-windows has mutable filesystem", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - } - ] - } - } - ], - "listInputResources": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-audit\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-audit\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CONFIG_FILES\",\"value\":\"/config/config.json\"},{\"name\":\"CA_SERVER_TYPE\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"cluster_kind\",\"name\":\"ca-audit\"}}}],\"image\":\"quay.io/armosec/k8s-ca-auditlog-ubi:21\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-audit\",\"ports\":[{\"containerPort\":443,\"name\":\"ca-audit-port\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/config\",\"name\":\"ca-audit\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-audit\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"config\",\"path\":\"config.json\"}],\"name\":\"ca-audit\"},\"name\":\"ca-audit\"},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:54Z", - "generation": 1, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CONFIG_FILES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_SERVER_TYPE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:54Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-audit", - "namespace": "cyberarmor-system", - "resourceVersion": "60787209", - "uid": "687f52ea-6956-4e8a-bb8c-7ea35a04b3f0" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-audit" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CONFIG_FILES", - "value": "/config/config.json" - }, - { - "name": "CA_SERVER_TYPE", - "valueFrom": { - "configMapKeyRef": { - "key": "cluster_kind", - "name": "ca-audit" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-auditlog-ubi:21", - "imagePullPolicy": "Always", - "name": "ca-audit", - "ports": [ - { - "containerPort": 443, - "name": "ca-audit-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/config", - "name": "ca-audit", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-audit", - "serviceAccountName": "ca-audit", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "config", - "path": "config.json" - } - ], - "name": "ca-audit" - }, - "name": "ca-audit" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:54Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-audit-c667df747\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-dashboard-aggregator\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-dashboard-aggregator\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-configtype=1\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-dashboard-aggregator\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"40Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:55Z", - "generation": 1, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-dashboard-aggregator\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:55Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T23:55:20Z" - } - ], - "name": "ca-dashboard-aggregator", - "namespace": "cyberarmor-system", - "resourceVersion": "61250607", - "uid": "0ba23569-e254-4388-b22f-30cc1eca031b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-dashboard-aggregator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-configtype=1", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173", - "imagePullPolicy": "Always", - "name": "ca-dashboard-aggregator", - "resources": { - "limits": { - "cpu": "200m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "40Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:18:55Z", - "lastUpdateTime": "2021-10-12T00:19:19Z", - "message": "ReplicaSet \"ca-dashboard-aggregator-5b8bdbc8f5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-12T23:55:20Z", - "lastUpdateTime": "2021-10-12T23:55:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-notification-server\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-notification-server\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"maserNotificationServer\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\",\"value\":\"customerGUID\"},{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\",\"value\":\"8001\"},{\"name\":\"CA_NOTIFICATION_SERVER_PORT\",\"value\":\"8002\"}],\"image\":\"quay.io/armosec/notification-server-ubi:89\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-notification-server\",\"ports\":[{\"containerPort\":8001,\"name\":\"websocket\"},{\"containerPort\":8002,\"name\":\"rest-api\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:59Z", - "generation": 1, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-notification-server\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8001,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:59Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:11Z" - } - ], - "name": "ca-notification-server", - "namespace": "cyberarmor-system", - "resourceVersion": "60787036", - "uid": "8c3dc6fe-e730-4364-8445-dc5a05ad2b0f" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-notification-server" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_HOST", - "valueFrom": { - "configMapKeyRef": { - "key": "maserNotificationServer", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_ATTRIBUTES", - "value": "customerGUID" - }, - { - "name": "CA_NOTIFICATION_SERVER_WS_PORT", - "value": "8001" - }, - { - "name": "CA_NOTIFICATION_SERVER_PORT", - "value": "8002" - } - ], - "image": "quay.io/armosec/notification-server-ubi:89", - "imagePullPolicy": "Always", - "name": "ca-notification-server", - "ports": [ - { - "containerPort": 8001, - "name": "websocket", - "protocol": "TCP" - }, - { - "containerPort": 8002, - "name": "rest-api", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "50Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:11Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:59Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "ReplicaSet \"ca-notification-server-6fd966c875\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-ocimage\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-ocimage\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-ocimage:63\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-ocimage\",\"ports\":[{\"containerPort\":8080,\"name\":\"ca-ocimage-port\"}],\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:51Z", - "generation": 1, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-ocimage\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:04Z" - } - ], - "name": "ca-ocimage", - "namespace": "cyberarmor-system", - "resourceVersion": "60786986", - "uid": "a6d37edf-b144-4677-91b3-73c73d9c7df6" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-ocimage" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-ocimage:63", - "imagePullPolicy": "Always", - "name": "ca-ocimage", - "ports": [ - { - "containerPort": 8080, - "name": "ca-ocimage-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "1", - "memory": "1000Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:04Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:51Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "ReplicaSet \"ca-ocimage-5576ff7d7d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-oracle\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-oracle\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_ORACLE_PORT\",\"value\":\"4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8002\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-oracle-ubi:11\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-oracle\",\"ports\":[{\"containerPort\":4000,\"name\":\"ca-oracle\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:19:01Z", - "generation": 1, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-oracle\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:19:01Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-oracle", - "namespace": "cyberarmor-system", - "resourceVersion": "60787203", - "uid": "da3dd21c-bf13-4d2a-97da-ca80b94d08d3" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-oracle" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_ORACLE_PORT", - "value": "4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8002" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-oracle-ubi:11", - "imagePullPolicy": "Always", - "name": "ca-oracle", - "ports": [ - { - "containerPort": 4000, - "name": "ca-oracle", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:19:01Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-oracle-6c98c6bdbf\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-posture\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-posture\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8001\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-posture-ubi:112\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-posture\",\"ports\":[{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/resources/config\",\"name\":\"ca-posture-score-config\",\"readOnly\":false},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"},{\"configMap\":{\"items\":[{\"key\":\"resourcesdict.json\",\"path\":\"resourcesdict.json\"},{\"key\":\"frameworkdict.json\",\"path\":\"frameworkdict.json\"}],\"name\":\"ca-posture-score-config\"},\"name\":\"ca-posture-score-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:58Z", - "generation": 1, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-posture\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/resources/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-posture-score-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:58Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:45Z" - } - ], - "name": "ca-posture", - "namespace": "cyberarmor-system", - "resourceVersion": "60787259", - "uid": "f41f4dc1-cfb0-4201-bca7-f1cf0b72b6b7" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-posture" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8001" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-posture-ubi:112", - "imagePullPolicy": "Always", - "name": "ca-posture", - "ports": [ - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "500m", - "memory": "100Mi" - }, - "requests": { - "cpu": "100m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/resources/config", - "name": "ca-posture-score-config" - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "resourcesdict.json", - "path": "resourcesdict.json" - }, - { - "key": "frameworkdict.json", - "path": "frameworkdict.json" - } - ], - "name": "ca-posture-score-config" - }, - "name": "ca-posture-score-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:45Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:58Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "ReplicaSet \"ca-posture-5996968d7b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-rbac\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-rbac\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"S3_BUCKET\",\"value\":\"ca-kubernetes-rbac-db-dev\"},{\"name\":\"AWS_REGION\",\"value\":\"eu-west-1\"},{\"name\":\"AWS_ACCESS_KEY_ID\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keyid\",\"name\":\"ca-rbac\"}}},{\"name\":\"AWS_SECRET_ACCESS_KEY\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keysecret\",\"name\":\"ca-rbac\"}}}],\"image\":\"quay.io/armosec/k8s-ca-rbac-scanner-ubi:20\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-rbac\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"400Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:50Z", - "generation": 1, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-rbac\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AWS_ACCESS_KEY_ID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"AWS_REGION\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"AWS_SECRET_ACCESS_KEY\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"S3_BUCKET\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:13Z" - } - ], - "name": "ca-rbac", - "namespace": "cyberarmor-system", - "resourceVersion": "60787051", - "uid": "d5898a09-2489-4254-b210-0725ddb2427a" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-rbac" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "S3_BUCKET", - "value": "ca-kubernetes-rbac-db-dev" - }, - { - "name": "AWS_REGION", - "value": "eu-west-1" - }, - { - "name": "AWS_ACCESS_KEY_ID", - "valueFrom": { - "secretKeyRef": { - "key": "keyid", - "name": "ca-rbac" - } - } - }, - { - "name": "AWS_SECRET_ACCESS_KEY", - "valueFrom": { - "secretKeyRef": { - "key": "keysecret", - "name": "ca-rbac" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-rbac-scanner-ubi:20", - "imagePullPolicy": "Always", - "name": "ca-rbac", - "resources": { - "limits": { - "cpu": "200m", - "memory": "400Mi" - }, - "requests": { - "cpu": "10m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:13Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:50Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "ReplicaSet \"ca-rbac-75c8cfd6b4\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-vuln-scan\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-vuln-scan\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"EVENT_RECEIVER_URL\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\",\"value\":\"4\"}],\"image\":\"quay.io/armosec/k8s-ca-vuln-scan-ubi:84\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-vuln-scan\",\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1.5Gi\"},\"requests\":{\"cpu\":\"500m\",\"memory\":\"1Gi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:47Z", - "generation": 1, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-vuln-scan\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EVENT_RECEIVER_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:00Z" - } - ], - "name": "ca-vuln-scan", - "namespace": "cyberarmor-system", - "resourceVersion": "60786938", - "uid": "9ea3d6cb-c6c0-423f-aab2-630827939285" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-vuln-scan" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "EVENT_RECEIVER_URL", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_MAX_VULN_SCAN_ROUTINS", - "value": "4" - } - ], - "image": "quay.io/armosec/k8s-ca-vuln-scan-ubi:84", - "imagePullPolicy": "Always", - "name": "ca-vuln-scan", - "resources": { - "limits": { - "cpu": "1", - "memory": "1536Mi" - }, - "requests": { - "cpu": "500m", - "memory": "1Gi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:00Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:47Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "ReplicaSet \"ca-vuln-scan-75b499df8c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-webhook\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-webhook\"}},\"template\":{\"metadata\":{\"annotations\":{\"certificate\":\"d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt\"},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-tlsCertFile=/etc/webhook/certs/tls.crt\",\"-tlsKeyFile=/etc/webhook/certs/tls.key\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_WEBHOOK_NAME\",\"value\":\"ca-webhook\"},{\"name\":\"CA_WEBHOOK_PORT\",\"value\":\"443\"},{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_LOGIN_SECRET_NAME\",\"value\":\"ca-login\"},{\"name\":\"CA_ORACLE_SERVER\",\"value\":\"http://ca-oracle:4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"http://ca-notification-server:8001\"},{\"name\":\"CA_OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-webhook-ubi:606\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-webhook\",\"ports\":[{\"containerPort\":443,\"name\":\"mutating-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"600Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"100Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/cazips\",\"name\":\"zip-download\"},{\"mountPath\":\"/etc/webhook/certs\",\"name\":\"ca-cluster-certificate\",\"readOnly\":true},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"emptyDir\":{},\"name\":\"zip-download\"},{\"name\":\"ca-cluster-certificate\",\"secret\":{\"secretName\":\"ca-cluster-certificate\"}},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:46Z", - "generation": 1, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:certificate": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-webhook\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_LOGIN_SECRET_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/cazips\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/webhook/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-cluster-certificate\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"zip-download\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:16Z" - } - ], - "name": "ca-webhook", - "namespace": "cyberarmor-system", - "resourceVersion": "60787072", - "uid": "c968fe90-8480-471f-bdf1-fa98447ce1d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-webhook" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "certificate": "d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt" - }, - "creationTimestamp": null, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-tlsCertFile=/etc/webhook/certs/tls.crt", - "-tlsKeyFile=/etc/webhook/certs/tls.key", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_WEBHOOK_NAME", - "value": "ca-webhook" - }, - { - "name": "CA_WEBHOOK_PORT", - "value": "443" - }, - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_LOGIN_SECRET_NAME", - "value": "ca-login" - }, - { - "name": "CA_ORACLE_SERVER", - "value": "http://ca-oracle:4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "http://ca-notification-server:8001" - }, - { - "name": "CA_OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-webhook-ubi:606", - "imagePullPolicy": "Always", - "name": "ca-webhook", - "ports": [ - { - "containerPort": 443, - "name": "mutating-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "600Mi" - }, - "requests": { - "cpu": "300m", - "memory": "100Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/cazips", - "name": "zip-download" - }, - { - "mountPath": "/etc/webhook/certs", - "name": "ca-cluster-certificate", - "readOnly": true - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "emptyDir": {}, - "name": "zip-download" - }, - { - "name": "ca-cluster-certificate", - "secret": { - "defaultMode": 420, - "secretName": "ca-cluster-certificate" - } - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:16Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:46Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "ReplicaSet \"ca-webhook-7dd8bbd798\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-websocket\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-websocket\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_VULN_SCAN_SCHEDULE\",\"value\":\"@every 11h\"},{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\",\"value\":\"@every 12h\"},{\"name\":\"CA_DEBUG_SIGNER\",\"value\":null}],\"image\":\"quay.io/armosec/k8s-ca-websocket-ubi:406\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-websocket\",\"ports\":[{\"containerPort\":4002,\"name\":\"trigger-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:43Z", - "generation": 1, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-websocket\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_DEBUG_SIGNER\"}": { - ".": {}, - "f:name": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_VULN_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:14Z" - } - ], - "name": "ca-websocket", - "namespace": "cyberarmor-system", - "resourceVersion": "60787065", - "uid": "914f30e9-d858-4945-9314-cbd3422ebaab" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-websocket" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_VULN_SCAN_SCHEDULE", - "value": "@every 11h" - }, - { - "name": "CA_POSTURE_SCAN_SCHEDULE", - "value": "@every 12h" - }, - { - "name": "CA_DEBUG_SIGNER" - } - ], - "image": "quay.io/armosec/k8s-ca-websocket-ubi:406", - "imagePullPolicy": "Always", - "name": "ca-websocket", - "ports": [ - { - "containerPort": 4002, - "name": "trigger-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "1000Mi" - }, - "requests": { - "cpu": "300m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:14Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:43Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "ReplicaSet \"ca-websocket-857758846f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"adservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"adservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"adservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/adservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"name\":\"server\",\"ports\":[{\"containerPort\":9555}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"180Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:51Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":9555,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:12Z" - } - ], - "name": "adservice", - "namespace": "hipster", - "resourceVersion": "61263240", - "uid": "368bea36-82be-4c28-8607-cf931a836185" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "adservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6415784d-d96b-4866-9c10-d571c8d8fd35", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:29", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-adservice" - }, - "creationTimestamp": null, - "labels": { - "app": "adservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/adservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 9555, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "300Mi" - }, - "requests": { - "cpu": "200m", - "memory": "180Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:24Z", - "lastUpdateTime": "2021-10-12T00:12:24Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:51Z", - "lastUpdateTime": "2021-10-13T00:28:12Z", - "message": "ReplicaSet \"adservice-7864446d5c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"cartservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"cartservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"cartservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"REDIS_ADDR\",\"value\":\"redis-cart:6379\"}],\"image\":\"gcr.io/google-samples/microservices-demo/cartservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15,\"periodSeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":7070}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:47Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"REDIS_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7070,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T09:40:08Z" - } - ], - "name": "cartservice", - "namespace": "hipster", - "resourceVersion": "61443544", - "uid": "df767287-ffc1-4559-b7fd-32b09bf6208c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "cartservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "7ced7c5c-c483-40b3-b6bc-8829339dc3e1", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:04", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-cartservice" - }, - "creationTimestamp": null, - "labels": { - "app": "cartservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "REDIS_ADDR", - "value": "redis-cart:6379" - } - ], - "image": "gcr.io/google-samples/microservices-demo/cartservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7070, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "128Mi" - }, - "requests": { - "cpu": "200m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-13T00:27:35Z", - "message": "ReplicaSet \"cartservice-7c8f8f9ddd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T09:40:08Z", - "lastUpdateTime": "2021-10-13T09:40:08Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"checkoutservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"checkoutservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"checkoutservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"5050\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"PAYMENT_SERVICE_ADDR\",\"value\":\"paymentservice:50051\"},{\"name\":\"EMAIL_SERVICE_ADDR\",\"value\":\"emailservice:5000\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"}],\"image\":\"gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":5050}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:42Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EMAIL_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PAYMENT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":5050,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:42Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:41Z" - } - ], - "name": "checkoutservice", - "namespace": "hipster", - "resourceVersion": "61262985", - "uid": "b5e6a8d8-1ec6-4acc-bf14-e3bb28bff284" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "checkoutservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "bebad8bb-8728-4813-ae19-d22a38a289a5", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:28", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-checkoutservice" - }, - "creationTimestamp": null, - "labels": { - "app": "checkoutservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "5050" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "PAYMENT_SERVICE_ADDR", - "value": "paymentservice:50051" - }, - { - "name": "EMAIL_SERVICE_ADDR", - "value": "emailservice:5000" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - } - ], - "image": "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 5050, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T14:05:32Z", - "lastUpdateTime": "2021-10-12T14:05:32Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:42Z", - "lastUpdateTime": "2021-10-13T00:27:42Z", - "message": "ReplicaSet \"checkoutservice-86c564466c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"currencyservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"currencyservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"currencyservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"7000\"}],\"image\":\"gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":7000,\"name\":\"grpc\"}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T08:37:54Z" - } - ], - "name": "currencyservice", - "namespace": "hipster", - "resourceVersion": "61423238", - "uid": "167b75e1-1be2-4764-aaad-dbb1ae248d3c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "currencyservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "4aa34494-0348-4859-9e29-56df9baf52ba", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-currencyservice" - }, - "creationTimestamp": null, - "labels": { - "app": "currencyservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "7000" - } - ], - "image": "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7000, - "name": "grpc", - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:29:19Z", - "message": "ReplicaSet \"currencyservice-544b6d849c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T08:37:54Z", - "lastUpdateTime": "2021-10-13T08:37:54Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"emailservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"emailservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"emailservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"DISABLE_PROFILER\",\"value\":\"1\"}],\"image\":\"gcr.io/google-samples/microservices-demo/emailservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:41Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"DISABLE_PROFILER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:41Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:07Z" - } - ], - "name": "emailservice", - "namespace": "hipster", - "resourceVersion": "61263204", - "uid": "9959433f-c964-4e6d-a2d7-3d1b9b617948" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "emailservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "e8aa9826-2367-44e1-9aad-a6d617b0fa06", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:48", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-emailservice" - }, - "creationTimestamp": null, - "labels": { - "app": "emailservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "DISABLE_PROFILER", - "value": "1" - } - ], - "image": "gcr.io/google-samples/microservices-demo/emailservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-12T00:11:47Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:41Z", - "lastUpdateTime": "2021-10-13T00:28:08Z", - "message": "ReplicaSet \"emailservice-cc7c4cd87\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"frontend\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"frontend\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"frontend\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"},{\"name\":\"RECOMMENDATION_SERVICE_ADDR\",\"value\":\"recommendationservice:8080\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"CHECKOUT_SERVICE_ADDR\",\"value\":\"checkoutservice:5050\"},{\"name\":\"AD_SERVICE_ADDR\",\"value\":\"adservice:9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/frontend:v0.2.3\",\"livenessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-liveness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-readiness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:44Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AD_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CHECKOUT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"RECOMMENDATION_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:44Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:34Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:22Z" - } - ], - "name": "frontend", - "namespace": "hipster", - "resourceVersion": "61263336", - "uid": "86b92d9e-22ad-4f0a-be26-41343f05f0d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "frontend" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9611f05f-4a8b-48ff-9722-e6a2ec702d65", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:57", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-frontend", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "frontend", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - }, - { - "name": "RECOMMENDATION_SERVICE_ADDR", - "value": "recommendationservice:8080" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "CHECKOUT_SERVICE_ADDR", - "value": "checkoutservice:5050" - }, - { - "name": "AD_SERVICE_ADDR", - "value": "adservice:9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/frontend:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-liveness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-readiness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:04Z", - "lastUpdateTime": "2021-10-12T00:12:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:44Z", - "lastUpdateTime": "2021-10-13T00:28:23Z", - "message": "ReplicaSet \"frontend-c747f6f47\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"loadgenerator\",\"namespace\":\"hipster\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"loadgenerator\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"loadgenerator\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"FRONTEND_ADDR\",\"value\":\"frontend:80\"},{\"name\":\"USERS\",\"value\":\"10\"}],\"image\":\"gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3\",\"name\":\"main\",\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"256Mi\"}}}],\"restartPolicy\":\"Always\",\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"main\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"FRONTEND_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"USERS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:38Z" - } - ], - "name": "loadgenerator", - "namespace": "hipster", - "resourceVersion": "61263451", - "uid": "e9200650-d25d-43f2-b1bc-4615beaed50c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "loadgenerator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "baca3d0f-fdc8-42c6-a9b1-ee29b3d173e0", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:26", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-loadgenerator", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "loadgenerator", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "FRONTEND_ADDR", - "value": "frontend:80" - }, - { - "name": "USERS", - "value": "10" - } - ], - "image": "gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "name": "main", - "resources": { - "limits": { - "cpu": "500m", - "memory": "512Mi" - }, - "requests": { - "cpu": "300m", - "memory": "256Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-13T00:24:15Z", - "lastUpdateTime": "2021-10-13T00:24:15Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:28:38Z", - "message": "ReplicaSet \"loadgenerator-6dcb6ffc4f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"paymentservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"paymentservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"paymentservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:45Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:45Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:29:27Z" - } - ], - "name": "paymentservice", - "namespace": "hipster", - "resourceVersion": "61263785", - "uid": "ab21c30f-d153-4ea8-982e-e12a71745dae" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "paymentservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "60b5720d-99b5-47a0-8bc4-656b372a6d17", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:52", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-paymentservice" - }, - "creationTimestamp": null, - "labels": { - "app": "paymentservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:45Z", - "lastUpdateTime": "2021-10-13T00:29:27Z", - "message": "ReplicaSet \"paymentservice-849b876ffd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"productcatalogservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"productcatalogservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"productcatalogservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":3550}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:46Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":3550,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:57Z" - } - ], - "name": "productcatalogservice", - "namespace": "hipster", - "resourceVersion": "61263117", - "uid": "50b29b6e-0f97-43b8-9555-a53d9c0e18f9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "productcatalogservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9bb4cc06-3907-401b-919f-c2974a623068", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-productcatalogservice" - }, - "creationTimestamp": null, - "labels": { - "app": "productcatalogservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 3550, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:46Z", - "lastUpdateTime": "2021-10-13T00:27:57Z", - "message": "ReplicaSet \"productcatalogservice-586fd876d5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"recommendationservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"recommendationservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"recommendationservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"450Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"220Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:43Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:37Z" - } - ], - "name": "recommendationservice", - "namespace": "hipster", - "resourceVersion": "61263443", - "uid": "00437f28-24c4-4759-ab93-f0be948eabc9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "recommendationservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "8cace306-b3ce-4f2f-8a6f-b122873b4eee", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-recommendationservice" - }, - "creationTimestamp": null, - "labels": { - "app": "recommendationservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "450Mi" - }, - "requests": { - "cpu": "100m", - "memory": "220Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-12T00:11:50Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:43Z", - "lastUpdateTime": "2021-10-13T00:28:37Z", - "message": "ReplicaSet \"recommendationservice-54b7b7b95d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"redis-cart\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"redis-cart\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"redis-cart\"}},\"spec\":{\"containers\":[{\"image\":\"redis:alpine\",\"livenessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"name\":\"redis\",\"ports\":[{\"containerPort\":6379}],\"readinessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"resources\":{\"limits\":{\"cpu\":\"125m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"70m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/data\",\"name\":\"redis-data\"}]}],\"volumes\":[{\"emptyDir\":{},\"name\":\"redis-data\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:50Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"redis\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":6379,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/data\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"redis-data\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:38Z" - } - ], - "name": "redis-cart", - "namespace": "hipster", - "resourceVersion": "61262948", - "uid": "76b3aebb-9ec5-479e-81ae-975ccf1bc6ec" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "redis-cart" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "838a7c21-618b-4693-a13b-838a9231ca58", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-redis-cart" - }, - "creationTimestamp": null, - "labels": { - "app": "redis-cart", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "image": "redis:alpine", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "name": "redis", - "ports": [ - { - "containerPort": 6379, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "125m", - "memory": "256Mi" - }, - "requests": { - "cpu": "70m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/data", - "name": "redis-data" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "emptyDir": {}, - "name": "redis-data" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:57Z", - "lastUpdateTime": "2021-10-12T00:11:57Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-13T00:27:38Z", - "message": "ReplicaSet \"redis-cart-594778c8b9\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"shippingservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"shippingservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"shippingservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:49Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:49Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:11Z" - } - ], - "name": "shippingservice", - "namespace": "hipster", - "resourceVersion": "61262726", - "uid": "febd2fe5-0e28-448e-aabd-31904ebb82a9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "shippingservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6503b850-839c-4b73-95ab-195d27b3c10d", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:26:58", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-shippingservice" - }, - "creationTimestamp": null, - "labels": { - "app": "shippingservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:00Z", - "lastUpdateTime": "2021-10-12T00:12:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:49Z", - "lastUpdateTime": "2021-10-13T00:27:11Z", - "message": "ReplicaSet \"shippingservice-758c9b4d4b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":\"10%\",\"maxUnavailable\":0}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"kubedns\",\"prometheus.io/port\":\"10054\",\"prometheus.io/scrape\":\"true\",\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"labels\":{\"k8s-app\":\"kube-dns\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchExpressions\":[{\"key\":\"k8s-app\",\"operator\":\"In\",\"values\":[\"kube-dns\"]}]},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"--domain=cluster.local.\",\"--dns-port=10053\",\"--config-dir=/kube-dns-config\",\"--v=2\"],\"env\":[{\"name\":\"PROMETHEUS_PORT\",\"value\":\"10055\"}],\"image\":\"gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/kubedns\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"kubedns\",\"ports\":[{\"containerPort\":10053,\"name\":\"dns-local\",\"protocol\":\"UDP\"},{\"containerPort\":10053,\"name\":\"dns-tcp-local\",\"protocol\":\"TCP\"},{\"containerPort\":10055,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readiness\",\"port\":8081,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":3,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"memory\":\"210Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"70Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001},\"volumeMounts\":[{\"mountPath\":\"/kube-dns-config\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"-v=2\",\"-logtostderr\",\"-configDir=/etc/k8s/dns/dnsmasq-nanny\",\"-restartDnsmasq=true\",\"--\",\"-k\",\"--cache-size=1000\",\"--no-negcache\",\"--dns-forward-max=1500\",\"--log-facility=-\",\"--server=/cluster.local/127.0.0.1#10053\",\"--server=/in-addr.arpa/127.0.0.1#10053\",\"--server=/ip6.arpa/127.0.0.1#10053\"],\"image\":\"gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/dnsmasq\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"dnsmasq\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"150m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"capabilities\":{\"add\":[\"NET_BIND_SERVICE\",\"SETGID\"],\"drop\":[\"all\"]}},\"volumeMounts\":[{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"--v=2\",\"--logtostderr\",\"--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV\",\"--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV\"],\"image\":\"gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/metrics\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"sidecar\",\"ports\":[{\"containerPort\":10054,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001}}],\"dnsPolicy\":\"Default\",\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 4, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:scheduler.alpha.kubernetes.io/critical-pod": {}, - "f:seccomp.security.alpha.kubernetes.io/pod": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:podAntiAffinity": { - ".": {}, - "f:preferredDuringSchedulingIgnoredDuringExecution": {} - } - }, - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:capabilities": { - ".": {}, - "f:add": {}, - "f:drop": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"kubedns\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PROMETHEUS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10053,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10053,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10055,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/kube-dns-config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"sidecar\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10054,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - "f:image": {} - }, - "k:{\"name\":\"kubedns\"}": { - "f:image": {} - }, - "k:{\"name\":\"sidecar\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:06:26Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "53109905", - "uid": "cd5cca24-7cd2-4548-a5d3-d90beb79f9e8" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 2, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "10%", - "maxUnavailable": 0 - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "kubedns", - "prometheus.io/port": "10054", - "prometheus.io/scrape": "true", - "scheduler.alpha.kubernetes.io/critical-pod": "", - "seccomp.security.alpha.kubernetes.io/pod": "runtime/default" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns" - } - }, - "spec": { - "affinity": { - "podAntiAffinity": { - "preferredDuringSchedulingIgnoredDuringExecution": [ - { - "podAffinityTerm": { - "labelSelector": { - "matchExpressions": [ - { - "key": "k8s-app", - "operator": "In", - "values": [ - "kube-dns" - ] - } - ] - }, - "topologyKey": "kubernetes.io/hostname" - }, - "weight": 100 - } - ] - } - }, - "containers": [ - { - "args": [ - "--domain=cluster.local.", - "--dns-port=10053", - "--config-dir=/kube-dns-config", - "--v=2" - ], - "env": [ - { - "name": "PROMETHEUS_PORT", - "value": "10055" - } - ], - "image": "gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/kubedns", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "kubedns", - "ports": [ - { - "containerPort": 10053, - "name": "dns-local", - "protocol": "UDP" - }, - { - "containerPort": 10053, - "name": "dns-tcp-local", - "protocol": "TCP" - }, - { - "containerPort": 10055, - "name": "metrics", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/readiness", - "port": 8081, - "scheme": "HTTP" - }, - "initialDelaySeconds": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "resources": { - "limits": { - "memory": "210Mi" - }, - "requests": { - "cpu": "100m", - "memory": "70Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/kube-dns-config", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "-v=2", - "-logtostderr", - "-configDir=/etc/k8s/dns/dnsmasq-nanny", - "-restartDnsmasq=true", - "--", - "-k", - "--cache-size=1000", - "--no-negcache", - "--dns-forward-max=1500", - "--log-facility=-", - "--server=/cluster.local/127.0.0.1#10053", - "--server=/in-addr.arpa/127.0.0.1#10053", - "--server=/ip6.arpa/127.0.0.1#10053" - ], - "image": "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/dnsmasq", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "dnsmasq", - "ports": [ - { - "containerPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "150m", - "memory": "20Mi" - } - }, - "securityContext": { - "capabilities": { - "add": [ - "NET_BIND_SERVICE", - "SETGID" - ], - "drop": [ - "all" - ] - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/k8s/dns/dnsmasq-nanny", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "--v=2", - "--logtostderr", - "--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV", - "--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV" - ], - "image": "gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/metrics", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "sidecar", - "ports": [ - { - "containerPort": 10054, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns", - "serviceAccountName": "kube-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 2, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-09-11T01:57:38Z", - "message": "ReplicaSet \"kube-dns-59844ff879\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:06:26Z", - "lastUpdateTime": "2021-09-25T17:06:26Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 4, - "readyReplicas": 2, - "replicas": 2, - "updatedReplicas": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns-autoscaler\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns-autoscaler\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"spec\":{\"containers\":[{\"command\":[\"/cluster-proportional-autoscaler\",\"--namespace=kube-system\",\"--configmap=kube-dns-autoscaler\",\"--target=Deployment/kube-dns\",\"--default-params={\\\"linear\\\":{\\\"coresPerReplica\\\":256,\\\"nodesPerReplica\\\":16,\\\"preventSinglePointFailure\\\":true,\\\"includeUnschedulableNodes\\\":true}}\",\"--logtostderr=true\",\"--v=2\"],\"image\":\"gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0\",\"name\":\"autoscaler\",\"resources\":{\"requests\":{\"cpu\":\"20m\",\"memory\":\"10Mi\"}}}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"seccompProfile\":{\"type\":\"RuntimeDefault\"},\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns-autoscaler\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns-autoscaler", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"autoscaler\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:02:52Z" - } - ], - "name": "kube-dns-autoscaler", - "namespace": "kube-system", - "resourceVersion": "53108562", - "uid": "c84ce079-f3c8-46ba-871f-0f2d42ffee1e" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/cluster-proportional-autoscaler", - "--namespace=kube-system", - "--configmap=kube-dns-autoscaler", - "--target=Deployment/kube-dns", - "--default-params={\"linear\":{\"coresPerReplica\":256,\"nodesPerReplica\":16,\"preventSinglePointFailure\":true,\"includeUnschedulableNodes\":true}}", - "--logtostderr=true", - "--v=2" - ], - "image": "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "autoscaler", - "resources": { - "requests": { - "cpu": "20m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "seccompProfile": { - "type": "RuntimeDefault" - }, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns-autoscaler", - "serviceAccountName": "kube-dns-autoscaler", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:54:39Z", - "message": "ReplicaSet \"kube-dns-autoscaler-844c9d9448\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:02:52Z", - "lastUpdateTime": "2021-09-25T17:02:52Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"glbc\",\"kubernetes.io/cluster-service\":\"true\",\"kubernetes.io/name\":\"GLBC\"},\"name\":\"l7-default-backend\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"glbc\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"glbc\",\"name\":\"glbc\"}},\"spec\":{\"containers\":[{\"image\":\"k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":30,\"timeoutSeconds\":5},\"name\":\"default-http-backend\",\"ports\":[{\"containerPort\":8080}],\"resources\":{\"limits\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}}}],\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"tolerations\":[{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "glbc", - "kubernetes.io/cluster-service": "true", - "kubernetes.io/name": "GLBC" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:kubernetes.io/name": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:name": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"default-http-backend\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:seccompProfile": { - "f:type": {} - } - }, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:01:20Z" - } - ], - "name": "l7-default-backend", - "namespace": "kube-system", - "resourceVersion": "53107969", - "uid": "32a76c03-37a1-44e9-b293-dd6b46ed274b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "glbc" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "glbc", - "name": "glbc" - } - }, - "spec": { - "containers": [ - { - "image": "k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 30, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "default-http-backend", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "10m", - "memory": "20Mi" - }, - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:56:25Z", - "message": "ReplicaSet \"l7-default-backend-56cb9644f6\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:01:20Z", - "lastUpdateTime": "2021-09-25T17:01:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "24", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metrics-server\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server-v0.3.6\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server\"},\"spec\":{\"containers\":[{\"command\":[\"/metrics-server\",\"--metric-resolution=30s\",\"--kubelet-port=10255\",\"--deprecated-kubelet-completely-insecure=true\",\"--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP\"],\"image\":\"k8s.gcr.io/metrics-server-amd64:v0.3.6\",\"name\":\"metrics-server\",\"ports\":[{\"containerPort\":443,\"name\":\"https\",\"protocol\":\"TCP\"}]},{\"command\":[\"/pod_nanny\",\"--config-dir=/etc/config\",\"--cpu=40m\",\"--extra-cpu=0.5m\",\"--memory=35Mi\",\"--extra-memory=4Mi\",\"--threshold=5\",\"--deployment=metrics-server-v0.3.6\",\"--container=metrics-server\",\"--poll-period=300000\",\"--estimator=exponential\",\"--scale-down-delay=24h\",\"--minClusterSize=5\",\"--use-metrics=true\"],\"env\":[{\"name\":\"MY_POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"MY_POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"gke.gcr.io/addon-resizer:1.8.11-gke.0\",\"name\":\"metrics-server-nanny\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"5m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"metrics-server-config-volume\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"metrics-server\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"metrics-server-config\"},\"name\":\"metrics-server-config-volume\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 24, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metrics-server", - "kubernetes.io/cluster-service": "true", - "version": "v0.3.6" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:version": {} - }, - "f:name": {} - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - }, - "k:{\"name\":\"metrics-server-nanny\"}": { - ".": {}, - "f:command": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"MY_POD_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"MY_POD_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"metrics-server-config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - "f:resources": { - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - } - } - } - } - } - } - }, - "manager": "pod_nanny", - "operation": "Update", - "time": "2021-06-13T13:42:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-26T17:13:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-26T17:13:52Z" - } - ], - "name": "metrics-server-v0.3.6", - "namespace": "kube-system", - "resourceVersion": "53582788", - "uid": "872d0f34-7998-45d3-9eea-570e0a47e03c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - }, - "name": "metrics-server" - }, - "spec": { - "containers": [ - { - "command": [ - "/metrics-server", - "--metric-resolution=30s", - "--kubelet-port=10255", - "--deprecated-kubelet-completely-insecure=true", - "--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP" - ], - "image": "k8s.gcr.io/metrics-server-amd64:v0.3.6", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server", - "ports": [ - { - "containerPort": 443, - "name": "https", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "44m", - "memory": "63Mi" - }, - "requests": { - "cpu": "44m", - "memory": "63Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - }, - { - "command": [ - "/pod_nanny", - "--config-dir=/etc/config", - "--cpu=40m", - "--extra-cpu=0.5m", - "--memory=35Mi", - "--extra-memory=4Mi", - "--threshold=5", - "--deployment=metrics-server-v0.3.6", - "--container=metrics-server", - "--poll-period=300000", - "--estimator=exponential", - "--scale-down-delay=24h", - "--minClusterSize=5", - "--use-metrics=true" - ], - "env": [ - { - "name": "MY_POD_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.name" - } - } - }, - { - "name": "MY_POD_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - } - ], - "image": "gke.gcr.io/addon-resizer:1.8.11-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server-nanny", - "resources": { - "limits": { - "cpu": "100m", - "memory": "300Mi" - }, - "requests": { - "cpu": "5m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "metrics-server-config-volume" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "serviceAccount": "metrics-server", - "serviceAccountName": "metrics-server", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "metrics-server-config" - }, - "name": "metrics-server-config-volume" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-09-25T17:12:33Z", - "lastUpdateTime": "2021-09-25T17:12:33Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-06-13T13:42:20Z", - "lastUpdateTime": "2021-09-26T17:13:52Z", - "message": "ReplicaSet \"metrics-server-v0.3.6-7889654bbb\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 24, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "6", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-proxy\"},\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-proxy\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-proxy\"}},\"spec\":{\"containers\":[{\"command\":[\"/bin/sh\",\"-c\",\"kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\\u003e\\u003e/var/log/kube-proxy.log 2\\u003e\\u00261\"],\"env\":[{\"name\":\"KUBERNETES_SERVICE_HOST\",\"value\":\"34.78.97.243\"}],\"image\":\"gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001\",\"name\":\"kube-proxy\",\"resources\":{\"requests\":{\"cpu\":\"100m\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/log\",\"name\":\"varlog\",\"readOnly\":false},{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/lib/modules\",\"name\":\"lib-modules\",\"readOnly\":true}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\",\"node.kubernetes.io/kube-proxy-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"kube-proxy\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/log\"},\"name\":\"varlog\"},{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"hostPath\":{\"path\":\"/lib/modules\"},\"name\":\"lib-modules\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "generation": 6, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-proxy" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBERNETES_SERVICE_HOST\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/kube-proxy-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - "f:command": {}, - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:44Z" - } - ], - "name": "kube-proxy", - "namespace": "kube-system", - "resourceVersion": "52161714", - "uid": "bb6f9ab0-e586-407b-95c0-773637c696e8" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-proxy" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-proxy" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "env": [ - { - "name": "KUBERNETES_SERVICE_HOST", - "value": "34.78.97.243" - } - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux", - "node.kubernetes.io/kube-proxy-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "kube-proxy", - "serviceAccountName": "kube-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 6 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"},\"name\":\"metadata-proxy-v0.1\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metadata-proxy\",\"version\":\"v0.1\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"}},\"spec\":{\"containers\":[{\"args\":[\"--addr=0.0.0.0:988\"],\"image\":\"k8s.gcr.io/metadata-proxy:v0.1.12\",\"name\":\"metadata-proxy\",\"resources\":{\"limits\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"},\"requests\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"}},\"securityContext\":{\"privileged\":true}}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"cloud.google.com/metadata-proxy-ready\":\"true\",\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"metadata-proxy\",\"terminationGracePeriodSeconds\":30,\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 3, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:cloud.google.com/metadata-proxy-ready": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - "f:args": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - } - ], - "name": "metadata-proxy-v0.1", - "namespace": "kube-system", - "resourceVersion": "25934435", - "uid": "94bf5845-f77b-47d4-bcec-e78549b4d8a3" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metadata-proxy", - "version": "v0.1" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--addr=0.0.0.0:988" - ], - "image": "k8s.gcr.io/metadata-proxy:v0.1.12", - "imagePullPolicy": "IfNotPresent", - "name": "metadata-proxy", - "resources": { - "limits": { - "cpu": "30m", - "memory": "25Mi" - }, - "requests": { - "cpu": "30m", - "memory": "25Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "cloud.google.com/metadata-proxy-ready": "true", - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "metadata-proxy", - "serviceAccountName": "metadata-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 3 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"node-local-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"node-local-dns\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"nodelocaldns\",\"components.gke.io/component-version\":\"1.4.0\",\"prometheus.io/port\":\"9253\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"k8s-app\":\"node-local-dns\"}},\"spec\":{\"containers\":[{\"args\":[\"-localip\",\"169.254.20.10,10.72.0.10\",\"-conf\",\"/etc/Corefile\",\"-upstreamsvc\",\"kube-dns-upstream\",\"-kubednscm\",\"/etc/kube-dns\"],\"image\":\"gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1\",\"livenessProbe\":{\"httpGet\":{\"host\":\"169.254.20.10\",\"path\":\"/health\",\"port\":8080},\"initialDelaySeconds\":60,\"timeoutSeconds\":5},\"name\":\"node-cache\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"},{\"containerPort\":9253,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"25m\",\"memory\":\"5Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/etc/coredns\",\"name\":\"config-volume\"},{\"mountPath\":\"/etc/kube-dns\",\"name\":\"kube-dns-config\"}]}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"addon.gke.io/node-local-dns-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"node-local-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"},{\"configMap\":{\"items\":[{\"key\":\"Corefile\",\"path\":\"Corefile.base\"}],\"name\":\"node-local-dns\"},\"name\":\"config-volume\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"}}}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "node-local-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:host": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":9253,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/coredns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/kube-dns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:addon.gke.io/node-local-dns-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "53114241", - "uid": "5069e9ba-0784-41bf-9577-3757bcb3b6d6" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "node-local-dns" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "nodelocaldns", - "components.gke.io/component-version": "1.4.0", - "prometheus.io/port": "9253", - "prometheus.io/scrape": "true" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "node-local-dns" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-localip", - "169.254.20.10,10.72.0.10", - "-conf", - "/etc/Corefile", - "-upstreamsvc", - "kube-dns-upstream", - "-kubednscm", - "/etc/kube-dns" - ], - "image": "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "host": "169.254.20.10", - "path": "/health", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "node-cache", - "ports": [ - { - "containerPort": 53, - "hostPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "hostPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - }, - { - "containerPort": 9253, - "hostPort": 9253, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "25m", - "memory": "5Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/etc/coredns", - "name": "config-volume" - }, - { - "mountPath": "/etc/kube-dns", - "name": "kube-dns-config" - } - ] - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "addon.gke.io/node-local-dns-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "node-local-dns", - "serviceAccountName": "node-local-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "Corefile", - "path": "Corefile.base" - } - ], - "name": "node-local-dns" - }, - "name": "config-volume" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 2, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"nvidia-gpu-device-plugin\"},\"name\":\"nvidia-gpu-device-plugin\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"cloud.google.com/gke-accelerator\",\"operator\":\"Exists\"}]}]}}},\"containers\":[{\"command\":[\"/usr/bin/nvidia-gpu-device-plugin\",\"-logtostderr\",\"--enable-container-gpu-metrics\",\"--enable-health-monitoring\"],\"env\":[{\"name\":\"LD_LIBRARY_PATH\",\"value\":\"/usr/local/nvidia/lib64\"}],\"image\":\"gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317\",\"name\":\"nvidia-gpu-device-plugin\",\"ports\":[{\"containerPort\":2112,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/device-plugin\",\"name\":\"device-plugin\"},{\"mountPath\":\"/dev\",\"name\":\"dev\"},{\"mountPath\":\"/usr/local/nvidia\",\"name\":\"nvidia\"},{\"mountPath\":\"/var/lib/kubelet/pod-resources\",\"name\":\"pod-resources\"},{\"mountPath\":\"/proc\",\"name\":\"proc\"},{\"mountPath\":\"/etc/nvidia\",\"name\":\"nvidia-config\"}]}],\"priorityClassName\":\"system-node-critical\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/device-plugins\"},\"name\":\"device-plugin\"},{\"hostPath\":{\"path\":\"/dev\"},\"name\":\"dev\"},{\"hostPath\":{\"path\":\"/home/kubernetes/bin/nvidia\",\"type\":\"Directory\"},\"name\":\"nvidia\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/pod-resources\"},\"name\":\"pod-resources\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"proc\"},{\"hostPath\":{\"path\":\"/etc/nvidia\"},\"name\":\"nvidia-config\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:17Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "nvidia-gpu-device-plugin" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:nodeAffinity": { - ".": {}, - "f:requiredDuringSchedulingIgnoredDuringExecution": { - ".": {}, - "f:nodeSelectorTerms": {} - } - } - }, - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"LD_LIBRARY_PATH\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":2112,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/device-plugin\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/local/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet/pod-resources\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"dev\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"device-plugin\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"nvidia\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"pod-resources\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - "f:command": {}, - "f:image": {}, - "f:volumeMounts": { - "k:{\"mountPath\":\"/etc/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/proc\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:volumes": { - "k:{\"name\":\"nvidia-config\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"proc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "nvidia-gpu-device-plugin", - "namespace": "kube-system", - "resourceVersion": "25934477", - "uid": "14396a20-ecee-4671-aefe-2a5b9d2e0dde" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "spec": { - "affinity": { - "nodeAffinity": { - "requiredDuringSchedulingIgnoredDuringExecution": { - "nodeSelectorTerms": [ - { - "matchExpressions": [ - { - "key": "cloud.google.com/gke-accelerator", - "operator": "Exists" - } - ] - } - ] - } - } - }, - "containers": [ - { - "command": [ - "/usr/bin/nvidia-gpu-device-plugin", - "-logtostderr", - "--enable-container-gpu-metrics", - "--enable-health-monitoring" - ], - "env": [ - { - "name": "LD_LIBRARY_PATH", - "value": "/usr/local/nvidia/lib64" - } - ], - "image": "gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317", - "imagePullPolicy": "IfNotPresent", - "name": "nvidia-gpu-device-plugin", - "ports": [ - { - "containerPort": 2112, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "20Mi" - }, - "requests": { - "cpu": "50m", - "memory": "20Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/device-plugin", - "name": "device-plugin" - }, - { - "mountPath": "/dev", - "name": "dev" - }, - { - "mountPath": "/usr/local/nvidia", - "name": "nvidia" - }, - { - "mountPath": "/var/lib/kubelet/pod-resources", - "name": "pod-resources" - }, - { - "mountPath": "/proc", - "name": "proc" - }, - { - "mountPath": "/etc/nvidia", - "name": "nvidia-config" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/device-plugins", - "type": "" - }, - "name": "device-plugin" - }, - { - "hostPath": { - "path": "/dev", - "type": "" - }, - "name": "dev" - }, - { - "hostPath": { - "path": "/home/kubernetes/bin/nvidia", - "type": "Directory" - }, - "name": "nvidia" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/pod-resources", - "type": "" - }, - "name": "pod-resources" - }, - { - "hostPath": { - "path": "/proc", - "type": "" - }, - "name": "proc" - }, - { - "hostPath": { - "path": "/etc/nvidia", - "type": "" - }, - "name": "nvidia-config" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:02:45.009201226Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:02:48Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"6de798cc-d558-479a-8ef4-38363e434633\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.63\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:02:55Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-5naq", - "uid": "6de798cc-d558-479a-8ef4-38363e434633" - } - ], - "resourceVersion": "53108585", - "uid": "fdd66d80-d09d-4b43-a291-b3797c7a5864" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-5naq", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://50767376b8a42b7a390e84c5c451d1485b1a562873b915100dc605bbcc49c1c5", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:02:48Z" - } - } - } - ], - "hostIP": "10.132.0.63", - "phase": "Running", - "podIP": "10.132.0.63", - "podIPs": [ - { - "ip": "10.132.0.63" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:02:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:09:05.595580038Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:09:09Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"d288c56c-2a00-42fe-b2ea-b8761fec2a4e\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.193\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:09:16Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-abj3", - "uid": "d288c56c-2a00-42fe-b2ea-b8761fec2a4e" - } - ], - "resourceVersion": "53110982", - "uid": "0866b060-d7a6-40bc-9ed9-292fbce958e9" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-abj3", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b04121a3de085254493b48dbe1be551abd021877d1c098afbd19e6429df8f4ba", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:09:08Z" - } - } - } - ], - "hostIP": "10.132.15.193", - "phase": "Running", - "podIP": "10.132.15.193", - "podIPs": [ - { - "ip": "10.132.15.193" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:09:06Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:56:27.195784979Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:56:29Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"9aa58d78-0147-4564-9900-0409a6bec341\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.61\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:56:37Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-enr8", - "uid": "9aa58d78-0147-4564-9900-0409a6bec341" - } - ], - "resourceVersion": "53106105", - "uid": "b940e7b5-9e7f-4ac7-a3ee-6c6655c1e65a" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-enr8", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b9375aed4bc463ecfa5fcfb0cfb3b55d087416bfe0c3267c1395e8f93569d03c", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:56:29Z" - } - } - } - ], - "hostIP": "10.132.0.61", - "phase": "Running", - "podIP": "10.132.0.61", - "podIPs": [ - { - "ip": "10.132.0.61" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:56:28Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:59:41.285621877Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:59:44Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"c1ab3c15-9764-40f5-ba6b-82556dc98ea2\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.62\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:59:52Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-oq2w", - "uid": "c1ab3c15-9764-40f5-ba6b-82556dc98ea2" - } - ], - "resourceVersion": "53107378", - "uid": "19e52dea-6339-4ed7-8e32-3d39b242d133" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-oq2w", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://a0b27bef16953a38c48075124547583280bccf28d1d6cf54c3b3e754e2847c86", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:59:44Z" - } - } - } - ], - "hostIP": "10.132.0.62", - "phase": "Running", - "podIP": "10.132.0.62", - "podIPs": [ - { - "ip": "10.132.0.62" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:59:42Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:12:12.095932889Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:12:15Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"7042c0e8-8dc5-4d1d-8b36-92c692c31c76\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.194\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:12:22Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-rgdp", - "uid": "7042c0e8-8dc5-4d1d-8b36-92c692c31c76" - } - ], - "resourceVersion": "53112149", - "uid": "5248c280-7bde-4fe9-a74e-56ae25abb0d2" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-rgdp", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://fd91ae480585a78c59ef401dc852d58921e76693ecbd908d98e4b63da6c298ff", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:12:14Z" - } - } - } - ], - "hostIP": "10.132.15.194", - "phase": "Running", - "podIP": "10.132.15.194", - "podIPs": [ - { - "ip": "10.132.15.194" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:12:13Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:05:45.558688986Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:05:49Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"a58f61e7-9d9e-4266-90d4-16b9969cb373\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.192\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:05:56Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-x940", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-x940", - "uid": "a58f61e7-9d9e-4266-90d4-16b9969cb373" - } - ], - "resourceVersion": "53109692", - "uid": "71a05734-f741-4b7e-82fe-765c555b3607" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-x940", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://6abab671623159f7174321118f58600f8955267a139a72508e9a73631ef7920d", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:05:48Z" - } - } - } - ], - "hostIP": "10.132.15.192", - "phase": "Running", - "podIP": "10.132.15.192", - "podIPs": [ - { - "ip": "10.132.15.192" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:05:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:15:06.466708143Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:15:10Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"65f37105-dd71-428b-bf8b-0e82b88027f1\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.195\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:15:17Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-zzyg", - "uid": "65f37105-dd71-428b-bf8b-0e82b88027f1" - } - ], - "resourceVersion": "53113200", - "uid": "dac23622-ae54-4a1a-a6ca-3c020911966e" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-zzyg", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://ee309dad5cb7047fcbd7eb0401760ccb4bd986080ab11c860911e37b132a2a5c", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:15:09Z" - } - } - } - ], - "hostIP": "10.132.15.195", - "phase": "Running", - "podIP": "10.132.15.195", - "podIPs": [ - { - "ip": "10.132.15.195" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:15:07Z" - } - } - ], - "listInputKinds": null - } - ], - "remediation": "Set the filesystem of the container to read-only when possible (POD securityContext, readOnlyRootFilesystem: true). If containers application needs to write into the filesystem, it is recommended to mount secondary filesystems for specific directories where application require write access.", - "description": "Mutable container filesystem can be abused to inject malicious code or data into containers. Use immutable (read-only) filesystem to limit potential attacks.", - "score": 23 - }, - { - "guid": "", - "attributes": { - "armoBuiltin": true - }, - "id": "C-0013", - "controlID": "C-0013", - "name": "Non-root containers", - "ruleReports": [ - { - "name": "non-root-containers", - "remediation": "", - "ruleStatus": { - "status": "success", - "message": "" - }, - "ruleResponses": null, - "listInputResources": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-audit\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-audit\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CONFIG_FILES\",\"value\":\"/config/config.json\"},{\"name\":\"CA_SERVER_TYPE\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"cluster_kind\",\"name\":\"ca-audit\"}}}],\"image\":\"quay.io/armosec/k8s-ca-auditlog-ubi:21\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-audit\",\"ports\":[{\"containerPort\":443,\"name\":\"ca-audit-port\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/config\",\"name\":\"ca-audit\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-audit\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"config\",\"path\":\"config.json\"}],\"name\":\"ca-audit\"},\"name\":\"ca-audit\"},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:54Z", - "generation": 1, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CONFIG_FILES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_SERVER_TYPE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:54Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-audit", - "namespace": "cyberarmor-system", - "resourceVersion": "60787209", - "uid": "687f52ea-6956-4e8a-bb8c-7ea35a04b3f0" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-audit" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CONFIG_FILES", - "value": "/config/config.json" - }, - { - "name": "CA_SERVER_TYPE", - "valueFrom": { - "configMapKeyRef": { - "key": "cluster_kind", - "name": "ca-audit" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-auditlog-ubi:21", - "imagePullPolicy": "Always", - "name": "ca-audit", - "ports": [ - { - "containerPort": 443, - "name": "ca-audit-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/config", - "name": "ca-audit", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-audit", - "serviceAccountName": "ca-audit", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "config", - "path": "config.json" - } - ], - "name": "ca-audit" - }, - "name": "ca-audit" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:54Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-audit-c667df747\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-dashboard-aggregator\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-dashboard-aggregator\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-configtype=1\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-dashboard-aggregator\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"40Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:55Z", - "generation": 1, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-dashboard-aggregator\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:55Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T23:55:20Z" - } - ], - "name": "ca-dashboard-aggregator", - "namespace": "cyberarmor-system", - "resourceVersion": "61250607", - "uid": "0ba23569-e254-4388-b22f-30cc1eca031b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-dashboard-aggregator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-configtype=1", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173", - "imagePullPolicy": "Always", - "name": "ca-dashboard-aggregator", - "resources": { - "limits": { - "cpu": "200m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "40Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:18:55Z", - "lastUpdateTime": "2021-10-12T00:19:19Z", - "message": "ReplicaSet \"ca-dashboard-aggregator-5b8bdbc8f5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-12T23:55:20Z", - "lastUpdateTime": "2021-10-12T23:55:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-notification-server\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-notification-server\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"maserNotificationServer\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\",\"value\":\"customerGUID\"},{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\",\"value\":\"8001\"},{\"name\":\"CA_NOTIFICATION_SERVER_PORT\",\"value\":\"8002\"}],\"image\":\"quay.io/armosec/notification-server-ubi:89\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-notification-server\",\"ports\":[{\"containerPort\":8001,\"name\":\"websocket\"},{\"containerPort\":8002,\"name\":\"rest-api\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:59Z", - "generation": 1, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-notification-server\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8001,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:59Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:11Z" - } - ], - "name": "ca-notification-server", - "namespace": "cyberarmor-system", - "resourceVersion": "60787036", - "uid": "8c3dc6fe-e730-4364-8445-dc5a05ad2b0f" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-notification-server" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_HOST", - "valueFrom": { - "configMapKeyRef": { - "key": "maserNotificationServer", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_ATTRIBUTES", - "value": "customerGUID" - }, - { - "name": "CA_NOTIFICATION_SERVER_WS_PORT", - "value": "8001" - }, - { - "name": "CA_NOTIFICATION_SERVER_PORT", - "value": "8002" - } - ], - "image": "quay.io/armosec/notification-server-ubi:89", - "imagePullPolicy": "Always", - "name": "ca-notification-server", - "ports": [ - { - "containerPort": 8001, - "name": "websocket", - "protocol": "TCP" - }, - { - "containerPort": 8002, - "name": "rest-api", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "50Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:11Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:59Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "ReplicaSet \"ca-notification-server-6fd966c875\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-ocimage\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-ocimage\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-ocimage:63\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-ocimage\",\"ports\":[{\"containerPort\":8080,\"name\":\"ca-ocimage-port\"}],\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:51Z", - "generation": 1, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-ocimage\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:04Z" - } - ], - "name": "ca-ocimage", - "namespace": "cyberarmor-system", - "resourceVersion": "60786986", - "uid": "a6d37edf-b144-4677-91b3-73c73d9c7df6" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-ocimage" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-ocimage:63", - "imagePullPolicy": "Always", - "name": "ca-ocimage", - "ports": [ - { - "containerPort": 8080, - "name": "ca-ocimage-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "1", - "memory": "1000Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:04Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:51Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "ReplicaSet \"ca-ocimage-5576ff7d7d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-oracle\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-oracle\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_ORACLE_PORT\",\"value\":\"4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8002\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-oracle-ubi:11\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-oracle\",\"ports\":[{\"containerPort\":4000,\"name\":\"ca-oracle\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:19:01Z", - "generation": 1, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-oracle\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:19:01Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-oracle", - "namespace": "cyberarmor-system", - "resourceVersion": "60787203", - "uid": "da3dd21c-bf13-4d2a-97da-ca80b94d08d3" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-oracle" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_ORACLE_PORT", - "value": "4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8002" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-oracle-ubi:11", - "imagePullPolicy": "Always", - "name": "ca-oracle", - "ports": [ - { - "containerPort": 4000, - "name": "ca-oracle", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:19:01Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-oracle-6c98c6bdbf\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-posture\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-posture\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8001\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-posture-ubi:112\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-posture\",\"ports\":[{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/resources/config\",\"name\":\"ca-posture-score-config\",\"readOnly\":false},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"},{\"configMap\":{\"items\":[{\"key\":\"resourcesdict.json\",\"path\":\"resourcesdict.json\"},{\"key\":\"frameworkdict.json\",\"path\":\"frameworkdict.json\"}],\"name\":\"ca-posture-score-config\"},\"name\":\"ca-posture-score-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:58Z", - "generation": 1, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-posture\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/resources/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-posture-score-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:58Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:45Z" - } - ], - "name": "ca-posture", - "namespace": "cyberarmor-system", - "resourceVersion": "60787259", - "uid": "f41f4dc1-cfb0-4201-bca7-f1cf0b72b6b7" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-posture" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8001" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-posture-ubi:112", - "imagePullPolicy": "Always", - "name": "ca-posture", - "ports": [ - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "500m", - "memory": "100Mi" - }, - "requests": { - "cpu": "100m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/resources/config", - "name": "ca-posture-score-config" - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "resourcesdict.json", - "path": "resourcesdict.json" - }, - { - "key": "frameworkdict.json", - "path": "frameworkdict.json" - } - ], - "name": "ca-posture-score-config" - }, - "name": "ca-posture-score-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:45Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:58Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "ReplicaSet \"ca-posture-5996968d7b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-rbac\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-rbac\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"S3_BUCKET\",\"value\":\"ca-kubernetes-rbac-db-dev\"},{\"name\":\"AWS_REGION\",\"value\":\"eu-west-1\"},{\"name\":\"AWS_ACCESS_KEY_ID\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keyid\",\"name\":\"ca-rbac\"}}},{\"name\":\"AWS_SECRET_ACCESS_KEY\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keysecret\",\"name\":\"ca-rbac\"}}}],\"image\":\"quay.io/armosec/k8s-ca-rbac-scanner-ubi:20\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-rbac\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"400Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:50Z", - "generation": 1, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-rbac\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AWS_ACCESS_KEY_ID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"AWS_REGION\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"AWS_SECRET_ACCESS_KEY\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"S3_BUCKET\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:13Z" - } - ], - "name": "ca-rbac", - "namespace": "cyberarmor-system", - "resourceVersion": "60787051", - "uid": "d5898a09-2489-4254-b210-0725ddb2427a" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-rbac" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "S3_BUCKET", - "value": "ca-kubernetes-rbac-db-dev" - }, - { - "name": "AWS_REGION", - "value": "eu-west-1" - }, - { - "name": "AWS_ACCESS_KEY_ID", - "valueFrom": { - "secretKeyRef": { - "key": "keyid", - "name": "ca-rbac" - } - } - }, - { - "name": "AWS_SECRET_ACCESS_KEY", - "valueFrom": { - "secretKeyRef": { - "key": "keysecret", - "name": "ca-rbac" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-rbac-scanner-ubi:20", - "imagePullPolicy": "Always", - "name": "ca-rbac", - "resources": { - "limits": { - "cpu": "200m", - "memory": "400Mi" - }, - "requests": { - "cpu": "10m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:13Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:50Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "ReplicaSet \"ca-rbac-75c8cfd6b4\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-vuln-scan\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-vuln-scan\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"EVENT_RECEIVER_URL\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\",\"value\":\"4\"}],\"image\":\"quay.io/armosec/k8s-ca-vuln-scan-ubi:84\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-vuln-scan\",\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1.5Gi\"},\"requests\":{\"cpu\":\"500m\",\"memory\":\"1Gi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:47Z", - "generation": 1, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-vuln-scan\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EVENT_RECEIVER_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:00Z" - } - ], - "name": "ca-vuln-scan", - "namespace": "cyberarmor-system", - "resourceVersion": "60786938", - "uid": "9ea3d6cb-c6c0-423f-aab2-630827939285" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-vuln-scan" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "EVENT_RECEIVER_URL", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_MAX_VULN_SCAN_ROUTINS", - "value": "4" - } - ], - "image": "quay.io/armosec/k8s-ca-vuln-scan-ubi:84", - "imagePullPolicy": "Always", - "name": "ca-vuln-scan", - "resources": { - "limits": { - "cpu": "1", - "memory": "1536Mi" - }, - "requests": { - "cpu": "500m", - "memory": "1Gi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:00Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:47Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "ReplicaSet \"ca-vuln-scan-75b499df8c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-webhook\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-webhook\"}},\"template\":{\"metadata\":{\"annotations\":{\"certificate\":\"d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt\"},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-tlsCertFile=/etc/webhook/certs/tls.crt\",\"-tlsKeyFile=/etc/webhook/certs/tls.key\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_WEBHOOK_NAME\",\"value\":\"ca-webhook\"},{\"name\":\"CA_WEBHOOK_PORT\",\"value\":\"443\"},{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_LOGIN_SECRET_NAME\",\"value\":\"ca-login\"},{\"name\":\"CA_ORACLE_SERVER\",\"value\":\"http://ca-oracle:4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"http://ca-notification-server:8001\"},{\"name\":\"CA_OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-webhook-ubi:606\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-webhook\",\"ports\":[{\"containerPort\":443,\"name\":\"mutating-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"600Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"100Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/cazips\",\"name\":\"zip-download\"},{\"mountPath\":\"/etc/webhook/certs\",\"name\":\"ca-cluster-certificate\",\"readOnly\":true},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"emptyDir\":{},\"name\":\"zip-download\"},{\"name\":\"ca-cluster-certificate\",\"secret\":{\"secretName\":\"ca-cluster-certificate\"}},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:46Z", - "generation": 1, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:certificate": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-webhook\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_LOGIN_SECRET_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/cazips\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/webhook/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-cluster-certificate\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"zip-download\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:16Z" - } - ], - "name": "ca-webhook", - "namespace": "cyberarmor-system", - "resourceVersion": "60787072", - "uid": "c968fe90-8480-471f-bdf1-fa98447ce1d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-webhook" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "certificate": "d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt" - }, - "creationTimestamp": null, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-tlsCertFile=/etc/webhook/certs/tls.crt", - "-tlsKeyFile=/etc/webhook/certs/tls.key", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_WEBHOOK_NAME", - "value": "ca-webhook" - }, - { - "name": "CA_WEBHOOK_PORT", - "value": "443" - }, - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_LOGIN_SECRET_NAME", - "value": "ca-login" - }, - { - "name": "CA_ORACLE_SERVER", - "value": "http://ca-oracle:4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "http://ca-notification-server:8001" - }, - { - "name": "CA_OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-webhook-ubi:606", - "imagePullPolicy": "Always", - "name": "ca-webhook", - "ports": [ - { - "containerPort": 443, - "name": "mutating-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "600Mi" - }, - "requests": { - "cpu": "300m", - "memory": "100Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/cazips", - "name": "zip-download" - }, - { - "mountPath": "/etc/webhook/certs", - "name": "ca-cluster-certificate", - "readOnly": true - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "emptyDir": {}, - "name": "zip-download" - }, - { - "name": "ca-cluster-certificate", - "secret": { - "defaultMode": 420, - "secretName": "ca-cluster-certificate" - } - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:16Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:46Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "ReplicaSet \"ca-webhook-7dd8bbd798\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-websocket\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-websocket\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_VULN_SCAN_SCHEDULE\",\"value\":\"@every 11h\"},{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\",\"value\":\"@every 12h\"},{\"name\":\"CA_DEBUG_SIGNER\",\"value\":null}],\"image\":\"quay.io/armosec/k8s-ca-websocket-ubi:406\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-websocket\",\"ports\":[{\"containerPort\":4002,\"name\":\"trigger-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:43Z", - "generation": 1, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-websocket\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_DEBUG_SIGNER\"}": { - ".": {}, - "f:name": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_VULN_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:14Z" - } - ], - "name": "ca-websocket", - "namespace": "cyberarmor-system", - "resourceVersion": "60787065", - "uid": "914f30e9-d858-4945-9314-cbd3422ebaab" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-websocket" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_VULN_SCAN_SCHEDULE", - "value": "@every 11h" - }, - { - "name": "CA_POSTURE_SCAN_SCHEDULE", - "value": "@every 12h" - }, - { - "name": "CA_DEBUG_SIGNER" - } - ], - "image": "quay.io/armosec/k8s-ca-websocket-ubi:406", - "imagePullPolicy": "Always", - "name": "ca-websocket", - "ports": [ - { - "containerPort": 4002, - "name": "trigger-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "1000Mi" - }, - "requests": { - "cpu": "300m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:14Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:43Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "ReplicaSet \"ca-websocket-857758846f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"adservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"adservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"adservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/adservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"name\":\"server\",\"ports\":[{\"containerPort\":9555}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"180Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:51Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":9555,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:12Z" - } - ], - "name": "adservice", - "namespace": "hipster", - "resourceVersion": "61263240", - "uid": "368bea36-82be-4c28-8607-cf931a836185" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "adservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6415784d-d96b-4866-9c10-d571c8d8fd35", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:29", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-adservice" - }, - "creationTimestamp": null, - "labels": { - "app": "adservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/adservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 9555, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "300Mi" - }, - "requests": { - "cpu": "200m", - "memory": "180Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:24Z", - "lastUpdateTime": "2021-10-12T00:12:24Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:51Z", - "lastUpdateTime": "2021-10-13T00:28:12Z", - "message": "ReplicaSet \"adservice-7864446d5c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"cartservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"cartservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"cartservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"REDIS_ADDR\",\"value\":\"redis-cart:6379\"}],\"image\":\"gcr.io/google-samples/microservices-demo/cartservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15,\"periodSeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":7070}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:47Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"REDIS_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7070,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T09:40:08Z" - } - ], - "name": "cartservice", - "namespace": "hipster", - "resourceVersion": "61443544", - "uid": "df767287-ffc1-4559-b7fd-32b09bf6208c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "cartservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "7ced7c5c-c483-40b3-b6bc-8829339dc3e1", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:04", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-cartservice" - }, - "creationTimestamp": null, - "labels": { - "app": "cartservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "REDIS_ADDR", - "value": "redis-cart:6379" - } - ], - "image": "gcr.io/google-samples/microservices-demo/cartservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7070, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "128Mi" - }, - "requests": { - "cpu": "200m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-13T00:27:35Z", - "message": "ReplicaSet \"cartservice-7c8f8f9ddd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T09:40:08Z", - "lastUpdateTime": "2021-10-13T09:40:08Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"checkoutservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"checkoutservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"checkoutservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"5050\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"PAYMENT_SERVICE_ADDR\",\"value\":\"paymentservice:50051\"},{\"name\":\"EMAIL_SERVICE_ADDR\",\"value\":\"emailservice:5000\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"}],\"image\":\"gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":5050}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:42Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EMAIL_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PAYMENT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":5050,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:42Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:41Z" - } - ], - "name": "checkoutservice", - "namespace": "hipster", - "resourceVersion": "61262985", - "uid": "b5e6a8d8-1ec6-4acc-bf14-e3bb28bff284" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "checkoutservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "bebad8bb-8728-4813-ae19-d22a38a289a5", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:28", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-checkoutservice" - }, - "creationTimestamp": null, - "labels": { - "app": "checkoutservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "5050" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "PAYMENT_SERVICE_ADDR", - "value": "paymentservice:50051" - }, - { - "name": "EMAIL_SERVICE_ADDR", - "value": "emailservice:5000" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - } - ], - "image": "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 5050, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T14:05:32Z", - "lastUpdateTime": "2021-10-12T14:05:32Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:42Z", - "lastUpdateTime": "2021-10-13T00:27:42Z", - "message": "ReplicaSet \"checkoutservice-86c564466c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"currencyservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"currencyservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"currencyservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"7000\"}],\"image\":\"gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":7000,\"name\":\"grpc\"}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T08:37:54Z" - } - ], - "name": "currencyservice", - "namespace": "hipster", - "resourceVersion": "61423238", - "uid": "167b75e1-1be2-4764-aaad-dbb1ae248d3c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "currencyservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "4aa34494-0348-4859-9e29-56df9baf52ba", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-currencyservice" - }, - "creationTimestamp": null, - "labels": { - "app": "currencyservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "7000" - } - ], - "image": "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7000, - "name": "grpc", - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:29:19Z", - "message": "ReplicaSet \"currencyservice-544b6d849c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T08:37:54Z", - "lastUpdateTime": "2021-10-13T08:37:54Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"emailservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"emailservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"emailservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"DISABLE_PROFILER\",\"value\":\"1\"}],\"image\":\"gcr.io/google-samples/microservices-demo/emailservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:41Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"DISABLE_PROFILER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:41Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:07Z" - } - ], - "name": "emailservice", - "namespace": "hipster", - "resourceVersion": "61263204", - "uid": "9959433f-c964-4e6d-a2d7-3d1b9b617948" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "emailservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "e8aa9826-2367-44e1-9aad-a6d617b0fa06", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:48", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-emailservice" - }, - "creationTimestamp": null, - "labels": { - "app": "emailservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "DISABLE_PROFILER", - "value": "1" - } - ], - "image": "gcr.io/google-samples/microservices-demo/emailservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-12T00:11:47Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:41Z", - "lastUpdateTime": "2021-10-13T00:28:08Z", - "message": "ReplicaSet \"emailservice-cc7c4cd87\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"frontend\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"frontend\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"frontend\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"},{\"name\":\"RECOMMENDATION_SERVICE_ADDR\",\"value\":\"recommendationservice:8080\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"CHECKOUT_SERVICE_ADDR\",\"value\":\"checkoutservice:5050\"},{\"name\":\"AD_SERVICE_ADDR\",\"value\":\"adservice:9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/frontend:v0.2.3\",\"livenessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-liveness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-readiness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:44Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AD_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CHECKOUT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"RECOMMENDATION_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:44Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:34Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:22Z" - } - ], - "name": "frontend", - "namespace": "hipster", - "resourceVersion": "61263336", - "uid": "86b92d9e-22ad-4f0a-be26-41343f05f0d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "frontend" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9611f05f-4a8b-48ff-9722-e6a2ec702d65", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:57", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-frontend", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "frontend", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - }, - { - "name": "RECOMMENDATION_SERVICE_ADDR", - "value": "recommendationservice:8080" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "CHECKOUT_SERVICE_ADDR", - "value": "checkoutservice:5050" - }, - { - "name": "AD_SERVICE_ADDR", - "value": "adservice:9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/frontend:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-liveness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-readiness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:04Z", - "lastUpdateTime": "2021-10-12T00:12:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:44Z", - "lastUpdateTime": "2021-10-13T00:28:23Z", - "message": "ReplicaSet \"frontend-c747f6f47\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"loadgenerator\",\"namespace\":\"hipster\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"loadgenerator\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"loadgenerator\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"FRONTEND_ADDR\",\"value\":\"frontend:80\"},{\"name\":\"USERS\",\"value\":\"10\"}],\"image\":\"gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3\",\"name\":\"main\",\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"256Mi\"}}}],\"restartPolicy\":\"Always\",\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"main\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"FRONTEND_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"USERS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:38Z" - } - ], - "name": "loadgenerator", - "namespace": "hipster", - "resourceVersion": "61263451", - "uid": "e9200650-d25d-43f2-b1bc-4615beaed50c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "loadgenerator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "baca3d0f-fdc8-42c6-a9b1-ee29b3d173e0", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:26", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-loadgenerator", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "loadgenerator", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "FRONTEND_ADDR", - "value": "frontend:80" - }, - { - "name": "USERS", - "value": "10" - } - ], - "image": "gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "name": "main", - "resources": { - "limits": { - "cpu": "500m", - "memory": "512Mi" - }, - "requests": { - "cpu": "300m", - "memory": "256Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-13T00:24:15Z", - "lastUpdateTime": "2021-10-13T00:24:15Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:28:38Z", - "message": "ReplicaSet \"loadgenerator-6dcb6ffc4f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"paymentservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"paymentservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"paymentservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:45Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:45Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:29:27Z" - } - ], - "name": "paymentservice", - "namespace": "hipster", - "resourceVersion": "61263785", - "uid": "ab21c30f-d153-4ea8-982e-e12a71745dae" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "paymentservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "60b5720d-99b5-47a0-8bc4-656b372a6d17", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:52", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-paymentservice" - }, - "creationTimestamp": null, - "labels": { - "app": "paymentservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:45Z", - "lastUpdateTime": "2021-10-13T00:29:27Z", - "message": "ReplicaSet \"paymentservice-849b876ffd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"productcatalogservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"productcatalogservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"productcatalogservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":3550}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:46Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":3550,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:57Z" - } - ], - "name": "productcatalogservice", - "namespace": "hipster", - "resourceVersion": "61263117", - "uid": "50b29b6e-0f97-43b8-9555-a53d9c0e18f9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "productcatalogservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9bb4cc06-3907-401b-919f-c2974a623068", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-productcatalogservice" - }, - "creationTimestamp": null, - "labels": { - "app": "productcatalogservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 3550, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:46Z", - "lastUpdateTime": "2021-10-13T00:27:57Z", - "message": "ReplicaSet \"productcatalogservice-586fd876d5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"recommendationservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"recommendationservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"recommendationservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"450Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"220Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:43Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:37Z" - } - ], - "name": "recommendationservice", - "namespace": "hipster", - "resourceVersion": "61263443", - "uid": "00437f28-24c4-4759-ab93-f0be948eabc9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "recommendationservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "8cace306-b3ce-4f2f-8a6f-b122873b4eee", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-recommendationservice" - }, - "creationTimestamp": null, - "labels": { - "app": "recommendationservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "450Mi" - }, - "requests": { - "cpu": "100m", - "memory": "220Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-12T00:11:50Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:43Z", - "lastUpdateTime": "2021-10-13T00:28:37Z", - "message": "ReplicaSet \"recommendationservice-54b7b7b95d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"redis-cart\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"redis-cart\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"redis-cart\"}},\"spec\":{\"containers\":[{\"image\":\"redis:alpine\",\"livenessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"name\":\"redis\",\"ports\":[{\"containerPort\":6379}],\"readinessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"resources\":{\"limits\":{\"cpu\":\"125m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"70m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/data\",\"name\":\"redis-data\"}]}],\"volumes\":[{\"emptyDir\":{},\"name\":\"redis-data\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:50Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"redis\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":6379,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/data\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"redis-data\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:38Z" - } - ], - "name": "redis-cart", - "namespace": "hipster", - "resourceVersion": "61262948", - "uid": "76b3aebb-9ec5-479e-81ae-975ccf1bc6ec" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "redis-cart" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "838a7c21-618b-4693-a13b-838a9231ca58", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-redis-cart" - }, - "creationTimestamp": null, - "labels": { - "app": "redis-cart", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "image": "redis:alpine", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "name": "redis", - "ports": [ - { - "containerPort": 6379, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "125m", - "memory": "256Mi" - }, - "requests": { - "cpu": "70m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/data", - "name": "redis-data" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "emptyDir": {}, - "name": "redis-data" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:57Z", - "lastUpdateTime": "2021-10-12T00:11:57Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-13T00:27:38Z", - "message": "ReplicaSet \"redis-cart-594778c8b9\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"shippingservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"shippingservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"shippingservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:49Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:49Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:11Z" - } - ], - "name": "shippingservice", - "namespace": "hipster", - "resourceVersion": "61262726", - "uid": "febd2fe5-0e28-448e-aabd-31904ebb82a9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "shippingservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6503b850-839c-4b73-95ab-195d27b3c10d", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:26:58", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-shippingservice" - }, - "creationTimestamp": null, - "labels": { - "app": "shippingservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:00Z", - "lastUpdateTime": "2021-10-12T00:12:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:49Z", - "lastUpdateTime": "2021-10-13T00:27:11Z", - "message": "ReplicaSet \"shippingservice-758c9b4d4b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":\"10%\",\"maxUnavailable\":0}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"kubedns\",\"prometheus.io/port\":\"10054\",\"prometheus.io/scrape\":\"true\",\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"labels\":{\"k8s-app\":\"kube-dns\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchExpressions\":[{\"key\":\"k8s-app\",\"operator\":\"In\",\"values\":[\"kube-dns\"]}]},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"--domain=cluster.local.\",\"--dns-port=10053\",\"--config-dir=/kube-dns-config\",\"--v=2\"],\"env\":[{\"name\":\"PROMETHEUS_PORT\",\"value\":\"10055\"}],\"image\":\"gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/kubedns\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"kubedns\",\"ports\":[{\"containerPort\":10053,\"name\":\"dns-local\",\"protocol\":\"UDP\"},{\"containerPort\":10053,\"name\":\"dns-tcp-local\",\"protocol\":\"TCP\"},{\"containerPort\":10055,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readiness\",\"port\":8081,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":3,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"memory\":\"210Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"70Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001},\"volumeMounts\":[{\"mountPath\":\"/kube-dns-config\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"-v=2\",\"-logtostderr\",\"-configDir=/etc/k8s/dns/dnsmasq-nanny\",\"-restartDnsmasq=true\",\"--\",\"-k\",\"--cache-size=1000\",\"--no-negcache\",\"--dns-forward-max=1500\",\"--log-facility=-\",\"--server=/cluster.local/127.0.0.1#10053\",\"--server=/in-addr.arpa/127.0.0.1#10053\",\"--server=/ip6.arpa/127.0.0.1#10053\"],\"image\":\"gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/dnsmasq\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"dnsmasq\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"150m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"capabilities\":{\"add\":[\"NET_BIND_SERVICE\",\"SETGID\"],\"drop\":[\"all\"]}},\"volumeMounts\":[{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"--v=2\",\"--logtostderr\",\"--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV\",\"--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV\"],\"image\":\"gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/metrics\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"sidecar\",\"ports\":[{\"containerPort\":10054,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001}}],\"dnsPolicy\":\"Default\",\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 4, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:scheduler.alpha.kubernetes.io/critical-pod": {}, - "f:seccomp.security.alpha.kubernetes.io/pod": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:podAntiAffinity": { - ".": {}, - "f:preferredDuringSchedulingIgnoredDuringExecution": {} - } - }, - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:capabilities": { - ".": {}, - "f:add": {}, - "f:drop": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"kubedns\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PROMETHEUS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10053,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10053,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10055,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/kube-dns-config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"sidecar\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10054,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - "f:image": {} - }, - "k:{\"name\":\"kubedns\"}": { - "f:image": {} - }, - "k:{\"name\":\"sidecar\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:06:26Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "53109905", - "uid": "cd5cca24-7cd2-4548-a5d3-d90beb79f9e8" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 2, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "10%", - "maxUnavailable": 0 - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "kubedns", - "prometheus.io/port": "10054", - "prometheus.io/scrape": "true", - "scheduler.alpha.kubernetes.io/critical-pod": "", - "seccomp.security.alpha.kubernetes.io/pod": "runtime/default" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns" - } - }, - "spec": { - "affinity": { - "podAntiAffinity": { - "preferredDuringSchedulingIgnoredDuringExecution": [ - { - "podAffinityTerm": { - "labelSelector": { - "matchExpressions": [ - { - "key": "k8s-app", - "operator": "In", - "values": [ - "kube-dns" - ] - } - ] - }, - "topologyKey": "kubernetes.io/hostname" - }, - "weight": 100 - } - ] - } - }, - "containers": [ - { - "args": [ - "--domain=cluster.local.", - "--dns-port=10053", - "--config-dir=/kube-dns-config", - "--v=2" - ], - "env": [ - { - "name": "PROMETHEUS_PORT", - "value": "10055" - } - ], - "image": "gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/kubedns", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "kubedns", - "ports": [ - { - "containerPort": 10053, - "name": "dns-local", - "protocol": "UDP" - }, - { - "containerPort": 10053, - "name": "dns-tcp-local", - "protocol": "TCP" - }, - { - "containerPort": 10055, - "name": "metrics", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/readiness", - "port": 8081, - "scheme": "HTTP" - }, - "initialDelaySeconds": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "resources": { - "limits": { - "memory": "210Mi" - }, - "requests": { - "cpu": "100m", - "memory": "70Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/kube-dns-config", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "-v=2", - "-logtostderr", - "-configDir=/etc/k8s/dns/dnsmasq-nanny", - "-restartDnsmasq=true", - "--", - "-k", - "--cache-size=1000", - "--no-negcache", - "--dns-forward-max=1500", - "--log-facility=-", - "--server=/cluster.local/127.0.0.1#10053", - "--server=/in-addr.arpa/127.0.0.1#10053", - "--server=/ip6.arpa/127.0.0.1#10053" - ], - "image": "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/dnsmasq", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "dnsmasq", - "ports": [ - { - "containerPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "150m", - "memory": "20Mi" - } - }, - "securityContext": { - "capabilities": { - "add": [ - "NET_BIND_SERVICE", - "SETGID" - ], - "drop": [ - "all" - ] - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/k8s/dns/dnsmasq-nanny", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "--v=2", - "--logtostderr", - "--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV", - "--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV" - ], - "image": "gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/metrics", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "sidecar", - "ports": [ - { - "containerPort": 10054, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns", - "serviceAccountName": "kube-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 2, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-09-11T01:57:38Z", - "message": "ReplicaSet \"kube-dns-59844ff879\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:06:26Z", - "lastUpdateTime": "2021-09-25T17:06:26Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 4, - "readyReplicas": 2, - "replicas": 2, - "updatedReplicas": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns-autoscaler\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns-autoscaler\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"spec\":{\"containers\":[{\"command\":[\"/cluster-proportional-autoscaler\",\"--namespace=kube-system\",\"--configmap=kube-dns-autoscaler\",\"--target=Deployment/kube-dns\",\"--default-params={\\\"linear\\\":{\\\"coresPerReplica\\\":256,\\\"nodesPerReplica\\\":16,\\\"preventSinglePointFailure\\\":true,\\\"includeUnschedulableNodes\\\":true}}\",\"--logtostderr=true\",\"--v=2\"],\"image\":\"gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0\",\"name\":\"autoscaler\",\"resources\":{\"requests\":{\"cpu\":\"20m\",\"memory\":\"10Mi\"}}}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"seccompProfile\":{\"type\":\"RuntimeDefault\"},\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns-autoscaler\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns-autoscaler", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"autoscaler\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:02:52Z" - } - ], - "name": "kube-dns-autoscaler", - "namespace": "kube-system", - "resourceVersion": "53108562", - "uid": "c84ce079-f3c8-46ba-871f-0f2d42ffee1e" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/cluster-proportional-autoscaler", - "--namespace=kube-system", - "--configmap=kube-dns-autoscaler", - "--target=Deployment/kube-dns", - "--default-params={\"linear\":{\"coresPerReplica\":256,\"nodesPerReplica\":16,\"preventSinglePointFailure\":true,\"includeUnschedulableNodes\":true}}", - "--logtostderr=true", - "--v=2" - ], - "image": "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "autoscaler", - "resources": { - "requests": { - "cpu": "20m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "seccompProfile": { - "type": "RuntimeDefault" - }, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns-autoscaler", - "serviceAccountName": "kube-dns-autoscaler", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:54:39Z", - "message": "ReplicaSet \"kube-dns-autoscaler-844c9d9448\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:02:52Z", - "lastUpdateTime": "2021-09-25T17:02:52Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"glbc\",\"kubernetes.io/cluster-service\":\"true\",\"kubernetes.io/name\":\"GLBC\"},\"name\":\"l7-default-backend\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"glbc\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"glbc\",\"name\":\"glbc\"}},\"spec\":{\"containers\":[{\"image\":\"k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":30,\"timeoutSeconds\":5},\"name\":\"default-http-backend\",\"ports\":[{\"containerPort\":8080}],\"resources\":{\"limits\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}}}],\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"tolerations\":[{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "glbc", - "kubernetes.io/cluster-service": "true", - "kubernetes.io/name": "GLBC" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:kubernetes.io/name": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:name": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"default-http-backend\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:seccompProfile": { - "f:type": {} - } - }, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:01:20Z" - } - ], - "name": "l7-default-backend", - "namespace": "kube-system", - "resourceVersion": "53107969", - "uid": "32a76c03-37a1-44e9-b293-dd6b46ed274b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "glbc" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "glbc", - "name": "glbc" - } - }, - "spec": { - "containers": [ - { - "image": "k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 30, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "default-http-backend", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "10m", - "memory": "20Mi" - }, - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:56:25Z", - "message": "ReplicaSet \"l7-default-backend-56cb9644f6\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:01:20Z", - "lastUpdateTime": "2021-09-25T17:01:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "24", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metrics-server\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server-v0.3.6\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server\"},\"spec\":{\"containers\":[{\"command\":[\"/metrics-server\",\"--metric-resolution=30s\",\"--kubelet-port=10255\",\"--deprecated-kubelet-completely-insecure=true\",\"--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP\"],\"image\":\"k8s.gcr.io/metrics-server-amd64:v0.3.6\",\"name\":\"metrics-server\",\"ports\":[{\"containerPort\":443,\"name\":\"https\",\"protocol\":\"TCP\"}]},{\"command\":[\"/pod_nanny\",\"--config-dir=/etc/config\",\"--cpu=40m\",\"--extra-cpu=0.5m\",\"--memory=35Mi\",\"--extra-memory=4Mi\",\"--threshold=5\",\"--deployment=metrics-server-v0.3.6\",\"--container=metrics-server\",\"--poll-period=300000\",\"--estimator=exponential\",\"--scale-down-delay=24h\",\"--minClusterSize=5\",\"--use-metrics=true\"],\"env\":[{\"name\":\"MY_POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"MY_POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"gke.gcr.io/addon-resizer:1.8.11-gke.0\",\"name\":\"metrics-server-nanny\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"5m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"metrics-server-config-volume\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"metrics-server\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"metrics-server-config\"},\"name\":\"metrics-server-config-volume\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 24, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metrics-server", - "kubernetes.io/cluster-service": "true", - "version": "v0.3.6" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:version": {} - }, - "f:name": {} - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - }, - "k:{\"name\":\"metrics-server-nanny\"}": { - ".": {}, - "f:command": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"MY_POD_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"MY_POD_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"metrics-server-config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - "f:resources": { - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - } - } - } - } - } - } - }, - "manager": "pod_nanny", - "operation": "Update", - "time": "2021-06-13T13:42:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-26T17:13:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-26T17:13:52Z" - } - ], - "name": "metrics-server-v0.3.6", - "namespace": "kube-system", - "resourceVersion": "53582788", - "uid": "872d0f34-7998-45d3-9eea-570e0a47e03c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - }, - "name": "metrics-server" - }, - "spec": { - "containers": [ - { - "command": [ - "/metrics-server", - "--metric-resolution=30s", - "--kubelet-port=10255", - "--deprecated-kubelet-completely-insecure=true", - "--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP" - ], - "image": "k8s.gcr.io/metrics-server-amd64:v0.3.6", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server", - "ports": [ - { - "containerPort": 443, - "name": "https", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "44m", - "memory": "63Mi" - }, - "requests": { - "cpu": "44m", - "memory": "63Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - }, - { - "command": [ - "/pod_nanny", - "--config-dir=/etc/config", - "--cpu=40m", - "--extra-cpu=0.5m", - "--memory=35Mi", - "--extra-memory=4Mi", - "--threshold=5", - "--deployment=metrics-server-v0.3.6", - "--container=metrics-server", - "--poll-period=300000", - "--estimator=exponential", - "--scale-down-delay=24h", - "--minClusterSize=5", - "--use-metrics=true" - ], - "env": [ - { - "name": "MY_POD_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.name" - } - } - }, - { - "name": "MY_POD_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - } - ], - "image": "gke.gcr.io/addon-resizer:1.8.11-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server-nanny", - "resources": { - "limits": { - "cpu": "100m", - "memory": "300Mi" - }, - "requests": { - "cpu": "5m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "metrics-server-config-volume" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "serviceAccount": "metrics-server", - "serviceAccountName": "metrics-server", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "metrics-server-config" - }, - "name": "metrics-server-config-volume" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-09-25T17:12:33Z", - "lastUpdateTime": "2021-09-25T17:12:33Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-06-13T13:42:20Z", - "lastUpdateTime": "2021-09-26T17:13:52Z", - "message": "ReplicaSet \"metrics-server-v0.3.6-7889654bbb\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 24, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "6", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-proxy\"},\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-proxy\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-proxy\"}},\"spec\":{\"containers\":[{\"command\":[\"/bin/sh\",\"-c\",\"kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\\u003e\\u003e/var/log/kube-proxy.log 2\\u003e\\u00261\"],\"env\":[{\"name\":\"KUBERNETES_SERVICE_HOST\",\"value\":\"34.78.97.243\"}],\"image\":\"gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001\",\"name\":\"kube-proxy\",\"resources\":{\"requests\":{\"cpu\":\"100m\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/log\",\"name\":\"varlog\",\"readOnly\":false},{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/lib/modules\",\"name\":\"lib-modules\",\"readOnly\":true}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\",\"node.kubernetes.io/kube-proxy-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"kube-proxy\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/log\"},\"name\":\"varlog\"},{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"hostPath\":{\"path\":\"/lib/modules\"},\"name\":\"lib-modules\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "generation": 6, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-proxy" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBERNETES_SERVICE_HOST\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/kube-proxy-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - "f:command": {}, - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:44Z" - } - ], - "name": "kube-proxy", - "namespace": "kube-system", - "resourceVersion": "52161714", - "uid": "bb6f9ab0-e586-407b-95c0-773637c696e8" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-proxy" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-proxy" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "env": [ - { - "name": "KUBERNETES_SERVICE_HOST", - "value": "34.78.97.243" - } - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux", - "node.kubernetes.io/kube-proxy-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "kube-proxy", - "serviceAccountName": "kube-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 6 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"},\"name\":\"metadata-proxy-v0.1\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metadata-proxy\",\"version\":\"v0.1\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"}},\"spec\":{\"containers\":[{\"args\":[\"--addr=0.0.0.0:988\"],\"image\":\"k8s.gcr.io/metadata-proxy:v0.1.12\",\"name\":\"metadata-proxy\",\"resources\":{\"limits\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"},\"requests\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"}},\"securityContext\":{\"privileged\":true}}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"cloud.google.com/metadata-proxy-ready\":\"true\",\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"metadata-proxy\",\"terminationGracePeriodSeconds\":30,\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 3, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:cloud.google.com/metadata-proxy-ready": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - "f:args": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - } - ], - "name": "metadata-proxy-v0.1", - "namespace": "kube-system", - "resourceVersion": "25934435", - "uid": "94bf5845-f77b-47d4-bcec-e78549b4d8a3" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metadata-proxy", - "version": "v0.1" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--addr=0.0.0.0:988" - ], - "image": "k8s.gcr.io/metadata-proxy:v0.1.12", - "imagePullPolicy": "IfNotPresent", - "name": "metadata-proxy", - "resources": { - "limits": { - "cpu": "30m", - "memory": "25Mi" - }, - "requests": { - "cpu": "30m", - "memory": "25Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "cloud.google.com/metadata-proxy-ready": "true", - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "metadata-proxy", - "serviceAccountName": "metadata-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 3 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"node-local-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"node-local-dns\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"nodelocaldns\",\"components.gke.io/component-version\":\"1.4.0\",\"prometheus.io/port\":\"9253\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"k8s-app\":\"node-local-dns\"}},\"spec\":{\"containers\":[{\"args\":[\"-localip\",\"169.254.20.10,10.72.0.10\",\"-conf\",\"/etc/Corefile\",\"-upstreamsvc\",\"kube-dns-upstream\",\"-kubednscm\",\"/etc/kube-dns\"],\"image\":\"gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1\",\"livenessProbe\":{\"httpGet\":{\"host\":\"169.254.20.10\",\"path\":\"/health\",\"port\":8080},\"initialDelaySeconds\":60,\"timeoutSeconds\":5},\"name\":\"node-cache\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"},{\"containerPort\":9253,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"25m\",\"memory\":\"5Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/etc/coredns\",\"name\":\"config-volume\"},{\"mountPath\":\"/etc/kube-dns\",\"name\":\"kube-dns-config\"}]}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"addon.gke.io/node-local-dns-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"node-local-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"},{\"configMap\":{\"items\":[{\"key\":\"Corefile\",\"path\":\"Corefile.base\"}],\"name\":\"node-local-dns\"},\"name\":\"config-volume\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"}}}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "node-local-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:host": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":9253,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/coredns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/kube-dns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:addon.gke.io/node-local-dns-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "53114241", - "uid": "5069e9ba-0784-41bf-9577-3757bcb3b6d6" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "node-local-dns" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "nodelocaldns", - "components.gke.io/component-version": "1.4.0", - "prometheus.io/port": "9253", - "prometheus.io/scrape": "true" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "node-local-dns" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-localip", - "169.254.20.10,10.72.0.10", - "-conf", - "/etc/Corefile", - "-upstreamsvc", - "kube-dns-upstream", - "-kubednscm", - "/etc/kube-dns" - ], - "image": "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "host": "169.254.20.10", - "path": "/health", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "node-cache", - "ports": [ - { - "containerPort": 53, - "hostPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "hostPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - }, - { - "containerPort": 9253, - "hostPort": 9253, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "25m", - "memory": "5Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/etc/coredns", - "name": "config-volume" - }, - { - "mountPath": "/etc/kube-dns", - "name": "kube-dns-config" - } - ] - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "addon.gke.io/node-local-dns-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "node-local-dns", - "serviceAccountName": "node-local-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "Corefile", - "path": "Corefile.base" - } - ], - "name": "node-local-dns" - }, - "name": "config-volume" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 2, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"nvidia-gpu-device-plugin\"},\"name\":\"nvidia-gpu-device-plugin\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"cloud.google.com/gke-accelerator\",\"operator\":\"Exists\"}]}]}}},\"containers\":[{\"command\":[\"/usr/bin/nvidia-gpu-device-plugin\",\"-logtostderr\",\"--enable-container-gpu-metrics\",\"--enable-health-monitoring\"],\"env\":[{\"name\":\"LD_LIBRARY_PATH\",\"value\":\"/usr/local/nvidia/lib64\"}],\"image\":\"gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317\",\"name\":\"nvidia-gpu-device-plugin\",\"ports\":[{\"containerPort\":2112,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/device-plugin\",\"name\":\"device-plugin\"},{\"mountPath\":\"/dev\",\"name\":\"dev\"},{\"mountPath\":\"/usr/local/nvidia\",\"name\":\"nvidia\"},{\"mountPath\":\"/var/lib/kubelet/pod-resources\",\"name\":\"pod-resources\"},{\"mountPath\":\"/proc\",\"name\":\"proc\"},{\"mountPath\":\"/etc/nvidia\",\"name\":\"nvidia-config\"}]}],\"priorityClassName\":\"system-node-critical\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/device-plugins\"},\"name\":\"device-plugin\"},{\"hostPath\":{\"path\":\"/dev\"},\"name\":\"dev\"},{\"hostPath\":{\"path\":\"/home/kubernetes/bin/nvidia\",\"type\":\"Directory\"},\"name\":\"nvidia\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/pod-resources\"},\"name\":\"pod-resources\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"proc\"},{\"hostPath\":{\"path\":\"/etc/nvidia\"},\"name\":\"nvidia-config\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:17Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "nvidia-gpu-device-plugin" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:nodeAffinity": { - ".": {}, - "f:requiredDuringSchedulingIgnoredDuringExecution": { - ".": {}, - "f:nodeSelectorTerms": {} - } - } - }, - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"LD_LIBRARY_PATH\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":2112,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/device-plugin\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/local/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet/pod-resources\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"dev\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"device-plugin\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"nvidia\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"pod-resources\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - "f:command": {}, - "f:image": {}, - "f:volumeMounts": { - "k:{\"mountPath\":\"/etc/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/proc\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:volumes": { - "k:{\"name\":\"nvidia-config\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"proc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "nvidia-gpu-device-plugin", - "namespace": "kube-system", - "resourceVersion": "25934477", - "uid": "14396a20-ecee-4671-aefe-2a5b9d2e0dde" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "spec": { - "affinity": { - "nodeAffinity": { - "requiredDuringSchedulingIgnoredDuringExecution": { - "nodeSelectorTerms": [ - { - "matchExpressions": [ - { - "key": "cloud.google.com/gke-accelerator", - "operator": "Exists" - } - ] - } - ] - } - } - }, - "containers": [ - { - "command": [ - "/usr/bin/nvidia-gpu-device-plugin", - "-logtostderr", - "--enable-container-gpu-metrics", - "--enable-health-monitoring" - ], - "env": [ - { - "name": "LD_LIBRARY_PATH", - "value": "/usr/local/nvidia/lib64" - } - ], - "image": "gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317", - "imagePullPolicy": "IfNotPresent", - "name": "nvidia-gpu-device-plugin", - "ports": [ - { - "containerPort": 2112, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "20Mi" - }, - "requests": { - "cpu": "50m", - "memory": "20Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/device-plugin", - "name": "device-plugin" - }, - { - "mountPath": "/dev", - "name": "dev" - }, - { - "mountPath": "/usr/local/nvidia", - "name": "nvidia" - }, - { - "mountPath": "/var/lib/kubelet/pod-resources", - "name": "pod-resources" - }, - { - "mountPath": "/proc", - "name": "proc" - }, - { - "mountPath": "/etc/nvidia", - "name": "nvidia-config" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/device-plugins", - "type": "" - }, - "name": "device-plugin" - }, - { - "hostPath": { - "path": "/dev", - "type": "" - }, - "name": "dev" - }, - { - "hostPath": { - "path": "/home/kubernetes/bin/nvidia", - "type": "Directory" - }, - "name": "nvidia" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/pod-resources", - "type": "" - }, - "name": "pod-resources" - }, - { - "hostPath": { - "path": "/proc", - "type": "" - }, - "name": "proc" - }, - { - "hostPath": { - "path": "/etc/nvidia", - "type": "" - }, - "name": "nvidia-config" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:02:45.009201226Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:02:48Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"6de798cc-d558-479a-8ef4-38363e434633\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.63\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:02:55Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-5naq", - "uid": "6de798cc-d558-479a-8ef4-38363e434633" - } - ], - "resourceVersion": "53108585", - "uid": "fdd66d80-d09d-4b43-a291-b3797c7a5864" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-5naq", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://50767376b8a42b7a390e84c5c451d1485b1a562873b915100dc605bbcc49c1c5", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:02:48Z" - } - } - } - ], - "hostIP": "10.132.0.63", - "phase": "Running", - "podIP": "10.132.0.63", - "podIPs": [ - { - "ip": "10.132.0.63" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:02:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:09:05.595580038Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:09:09Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"d288c56c-2a00-42fe-b2ea-b8761fec2a4e\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.193\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:09:16Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-abj3", - "uid": "d288c56c-2a00-42fe-b2ea-b8761fec2a4e" - } - ], - "resourceVersion": "53110982", - "uid": "0866b060-d7a6-40bc-9ed9-292fbce958e9" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-abj3", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b04121a3de085254493b48dbe1be551abd021877d1c098afbd19e6429df8f4ba", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:09:08Z" - } - } - } - ], - "hostIP": "10.132.15.193", - "phase": "Running", - "podIP": "10.132.15.193", - "podIPs": [ - { - "ip": "10.132.15.193" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:09:06Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:56:27.195784979Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:56:29Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"9aa58d78-0147-4564-9900-0409a6bec341\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.61\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:56:37Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-enr8", - "uid": "9aa58d78-0147-4564-9900-0409a6bec341" - } - ], - "resourceVersion": "53106105", - "uid": "b940e7b5-9e7f-4ac7-a3ee-6c6655c1e65a" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-enr8", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b9375aed4bc463ecfa5fcfb0cfb3b55d087416bfe0c3267c1395e8f93569d03c", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:56:29Z" - } - } - } - ], - "hostIP": "10.132.0.61", - "phase": "Running", - "podIP": "10.132.0.61", - "podIPs": [ - { - "ip": "10.132.0.61" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:56:28Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:59:41.285621877Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:59:44Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"c1ab3c15-9764-40f5-ba6b-82556dc98ea2\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.62\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:59:52Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-oq2w", - "uid": "c1ab3c15-9764-40f5-ba6b-82556dc98ea2" - } - ], - "resourceVersion": "53107378", - "uid": "19e52dea-6339-4ed7-8e32-3d39b242d133" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-oq2w", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://a0b27bef16953a38c48075124547583280bccf28d1d6cf54c3b3e754e2847c86", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:59:44Z" - } - } - } - ], - "hostIP": "10.132.0.62", - "phase": "Running", - "podIP": "10.132.0.62", - "podIPs": [ - { - "ip": "10.132.0.62" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:59:42Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:12:12.095932889Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:12:15Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"7042c0e8-8dc5-4d1d-8b36-92c692c31c76\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.194\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:12:22Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-rgdp", - "uid": "7042c0e8-8dc5-4d1d-8b36-92c692c31c76" - } - ], - "resourceVersion": "53112149", - "uid": "5248c280-7bde-4fe9-a74e-56ae25abb0d2" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-rgdp", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://fd91ae480585a78c59ef401dc852d58921e76693ecbd908d98e4b63da6c298ff", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:12:14Z" - } - } - } - ], - "hostIP": "10.132.15.194", - "phase": "Running", - "podIP": "10.132.15.194", - "podIPs": [ - { - "ip": "10.132.15.194" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:12:13Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:05:45.558688986Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:05:49Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"a58f61e7-9d9e-4266-90d4-16b9969cb373\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.192\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:05:56Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-x940", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-x940", - "uid": "a58f61e7-9d9e-4266-90d4-16b9969cb373" - } - ], - "resourceVersion": "53109692", - "uid": "71a05734-f741-4b7e-82fe-765c555b3607" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-x940", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://6abab671623159f7174321118f58600f8955267a139a72508e9a73631ef7920d", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:05:48Z" - } - } - } - ], - "hostIP": "10.132.15.192", - "phase": "Running", - "podIP": "10.132.15.192", - "podIPs": [ - { - "ip": "10.132.15.192" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:05:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:15:06.466708143Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:15:10Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"65f37105-dd71-428b-bf8b-0e82b88027f1\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.195\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:15:17Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-zzyg", - "uid": "65f37105-dd71-428b-bf8b-0e82b88027f1" - } - ], - "resourceVersion": "53113200", - "uid": "dac23622-ae54-4a1a-a6ca-3c020911966e" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-zzyg", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://ee309dad5cb7047fcbd7eb0401760ccb4bd986080ab11c860911e37b132a2a5c", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:15:09Z" - } - } - } - ], - "hostIP": "10.132.15.195", - "phase": "Running", - "podIP": "10.132.15.195", - "podIPs": [ - { - "ip": "10.132.15.195" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:15:07Z" - } - } - ], - "listInputKinds": null - } - ], - "remediation": "If your application does not need root privileges, make sure to define the runAsUser or runAsGroup under the PodSecurityContext and use user ID 1000 or higher. Do not turn on allowPrivlegeEscalation bit and make sure runAsNonRoot is true.", - "description": "Potential attackers may gain access to a container and leverage its existing privileges to conduct an attack. Therefore, it is not recommended to deploy containers with root privileges unless it is absolutely necessary. This contol identifies all the Pods running as root or can escalate to root.", - "score": 100 - }, - { - "guid": "", - "attributes": { - "armoBuiltin": true, - "microsoftMitreColumns": [ - "Privilege escalation" - ] - }, - "id": "C-0057", - "controlID": "C-0057", - "name": "Privileged container", - "ruleReports": [ - { - "name": "rule-privilege-escalation", - "remediation": "", - "ruleStatus": { - "status": "success", - "message": "" - }, - "ruleResponses": [ - { - "alertMessage": "the following pods are defined as privileged: kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 3, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:02:45.009201226Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:02:48Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"6de798cc-d558-479a-8ef4-38363e434633\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.63\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:02:55Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-5naq", - "uid": "6de798cc-d558-479a-8ef4-38363e434633" - } - ], - "resourceVersion": "53108585", - "uid": "fdd66d80-d09d-4b43-a291-b3797c7a5864" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-5naq", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://50767376b8a42b7a390e84c5c451d1485b1a562873b915100dc605bbcc49c1c5", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:02:48Z" - } - } - } - ], - "hostIP": "10.132.0.63", - "phase": "Running", - "podIP": "10.132.0.63", - "podIPs": [ - { - "ip": "10.132.0.63" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:02:46Z" - } - } - ] - } - }, - { - "alertMessage": "the following pods are defined as privileged: kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 3, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:09:05.595580038Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:09:09Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"d288c56c-2a00-42fe-b2ea-b8761fec2a4e\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.193\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:09:16Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-abj3", - "uid": "d288c56c-2a00-42fe-b2ea-b8761fec2a4e" - } - ], - "resourceVersion": "53110982", - "uid": "0866b060-d7a6-40bc-9ed9-292fbce958e9" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-abj3", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b04121a3de085254493b48dbe1be551abd021877d1c098afbd19e6429df8f4ba", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:09:08Z" - } - } - } - ], - "hostIP": "10.132.15.193", - "phase": "Running", - "podIP": "10.132.15.193", - "podIPs": [ - { - "ip": "10.132.15.193" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:09:06Z" - } - } - ] - } - }, - { - "alertMessage": "the following pods are defined as privileged: kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 3, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:56:27.195784979Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:56:29Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"9aa58d78-0147-4564-9900-0409a6bec341\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.61\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:56:37Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-enr8", - "uid": "9aa58d78-0147-4564-9900-0409a6bec341" - } - ], - "resourceVersion": "53106105", - "uid": "b940e7b5-9e7f-4ac7-a3ee-6c6655c1e65a" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-enr8", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b9375aed4bc463ecfa5fcfb0cfb3b55d087416bfe0c3267c1395e8f93569d03c", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:56:29Z" - } - } - } - ], - "hostIP": "10.132.0.61", - "phase": "Running", - "podIP": "10.132.0.61", - "podIPs": [ - { - "ip": "10.132.0.61" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:56:28Z" - } - } - ] - } - }, - { - "alertMessage": "the following pods are defined as privileged: kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 3, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:59:41.285621877Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:59:44Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"c1ab3c15-9764-40f5-ba6b-82556dc98ea2\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.62\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:59:52Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-oq2w", - "uid": "c1ab3c15-9764-40f5-ba6b-82556dc98ea2" - } - ], - "resourceVersion": "53107378", - "uid": "19e52dea-6339-4ed7-8e32-3d39b242d133" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-oq2w", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://a0b27bef16953a38c48075124547583280bccf28d1d6cf54c3b3e754e2847c86", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:59:44Z" - } - } - } - ], - "hostIP": "10.132.0.62", - "phase": "Running", - "podIP": "10.132.0.62", - "podIPs": [ - { - "ip": "10.132.0.62" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:59:42Z" - } - } - ] - } - }, - { - "alertMessage": "the following pods are defined as privileged: kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 3, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:12:12.095932889Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:12:15Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"7042c0e8-8dc5-4d1d-8b36-92c692c31c76\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.194\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:12:22Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-rgdp", - "uid": "7042c0e8-8dc5-4d1d-8b36-92c692c31c76" - } - ], - "resourceVersion": "53112149", - "uid": "5248c280-7bde-4fe9-a74e-56ae25abb0d2" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-rgdp", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://fd91ae480585a78c59ef401dc852d58921e76693ecbd908d98e4b63da6c298ff", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:12:14Z" - } - } - } - ], - "hostIP": "10.132.15.194", - "phase": "Running", - "podIP": "10.132.15.194", - "podIPs": [ - { - "ip": "10.132.15.194" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:12:13Z" - } - } - ] - } - }, - { - "alertMessage": "the following pods are defined as privileged: kube-proxy-gke-leonid-cluster-default-pool-98608036-x940", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 3, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:05:45.558688986Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:05:49Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"a58f61e7-9d9e-4266-90d4-16b9969cb373\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.192\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:05:56Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-x940", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-x940", - "uid": "a58f61e7-9d9e-4266-90d4-16b9969cb373" - } - ], - "resourceVersion": "53109692", - "uid": "71a05734-f741-4b7e-82fe-765c555b3607" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-x940", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://6abab671623159f7174321118f58600f8955267a139a72508e9a73631ef7920d", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:05:48Z" - } - } - } - ], - "hostIP": "10.132.15.192", - "phase": "Running", - "podIP": "10.132.15.192", - "podIPs": [ - { - "ip": "10.132.15.192" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:05:46Z" - } - } - ] - } - }, - { - "alertMessage": "the following pods are defined as privileged: kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 3, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:15:06.466708143Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:15:10Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"65f37105-dd71-428b-bf8b-0e82b88027f1\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.195\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:15:17Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-zzyg", - "uid": "65f37105-dd71-428b-bf8b-0e82b88027f1" - } - ], - "resourceVersion": "53113200", - "uid": "dac23622-ae54-4a1a-a6ca-3c020911966e" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-zzyg", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://ee309dad5cb7047fcbd7eb0401760ccb4bd986080ab11c860911e37b132a2a5c", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:15:09Z" - } - } - } - ], - "hostIP": "10.132.15.195", - "phase": "Running", - "podIP": "10.132.15.195", - "podIPs": [ - { - "ip": "10.132.15.195" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:15:07Z" - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: kube-proxy is defined as privileged:", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 3, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "6", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-proxy\"},\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-proxy\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-proxy\"}},\"spec\":{\"containers\":[{\"command\":[\"/bin/sh\",\"-c\",\"kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\\u003e\\u003e/var/log/kube-proxy.log 2\\u003e\\u00261\"],\"env\":[{\"name\":\"KUBERNETES_SERVICE_HOST\",\"value\":\"34.78.97.243\"}],\"image\":\"gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001\",\"name\":\"kube-proxy\",\"resources\":{\"requests\":{\"cpu\":\"100m\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/log\",\"name\":\"varlog\",\"readOnly\":false},{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/lib/modules\",\"name\":\"lib-modules\",\"readOnly\":true}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\",\"node.kubernetes.io/kube-proxy-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"kube-proxy\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/log\"},\"name\":\"varlog\"},{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"hostPath\":{\"path\":\"/lib/modules\"},\"name\":\"lib-modules\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "generation": 6, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-proxy" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBERNETES_SERVICE_HOST\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/kube-proxy-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - "f:command": {}, - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:44Z" - } - ], - "name": "kube-proxy", - "namespace": "kube-system", - "resourceVersion": "52161714", - "uid": "bb6f9ab0-e586-407b-95c0-773637c696e8" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-proxy" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-proxy" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "env": [ - { - "name": "KUBERNETES_SERVICE_HOST", - "value": "34.78.97.243" - } - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux", - "node.kubernetes.io/kube-proxy-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "kube-proxy", - "serviceAccountName": "kube-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 6 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: metadata-proxy-v0.1 is defined as privileged:", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 3, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"},\"name\":\"metadata-proxy-v0.1\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metadata-proxy\",\"version\":\"v0.1\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"}},\"spec\":{\"containers\":[{\"args\":[\"--addr=0.0.0.0:988\"],\"image\":\"k8s.gcr.io/metadata-proxy:v0.1.12\",\"name\":\"metadata-proxy\",\"resources\":{\"limits\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"},\"requests\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"}},\"securityContext\":{\"privileged\":true}}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"cloud.google.com/metadata-proxy-ready\":\"true\",\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"metadata-proxy\",\"terminationGracePeriodSeconds\":30,\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 3, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:cloud.google.com/metadata-proxy-ready": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - "f:args": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - } - ], - "name": "metadata-proxy-v0.1", - "namespace": "kube-system", - "resourceVersion": "25934435", - "uid": "94bf5845-f77b-47d4-bcec-e78549b4d8a3" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metadata-proxy", - "version": "v0.1" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--addr=0.0.0.0:988" - ], - "image": "k8s.gcr.io/metadata-proxy:v0.1.12", - "imagePullPolicy": "IfNotPresent", - "name": "metadata-proxy", - "resources": { - "limits": { - "cpu": "30m", - "memory": "25Mi" - }, - "requests": { - "cpu": "30m", - "memory": "25Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "cloud.google.com/metadata-proxy-ready": "true", - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "metadata-proxy", - "serviceAccountName": "metadata-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 3 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: node-local-dns is defined as privileged:", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 3, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"node-local-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"node-local-dns\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"nodelocaldns\",\"components.gke.io/component-version\":\"1.4.0\",\"prometheus.io/port\":\"9253\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"k8s-app\":\"node-local-dns\"}},\"spec\":{\"containers\":[{\"args\":[\"-localip\",\"169.254.20.10,10.72.0.10\",\"-conf\",\"/etc/Corefile\",\"-upstreamsvc\",\"kube-dns-upstream\",\"-kubednscm\",\"/etc/kube-dns\"],\"image\":\"gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1\",\"livenessProbe\":{\"httpGet\":{\"host\":\"169.254.20.10\",\"path\":\"/health\",\"port\":8080},\"initialDelaySeconds\":60,\"timeoutSeconds\":5},\"name\":\"node-cache\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"},{\"containerPort\":9253,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"25m\",\"memory\":\"5Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/etc/coredns\",\"name\":\"config-volume\"},{\"mountPath\":\"/etc/kube-dns\",\"name\":\"kube-dns-config\"}]}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"addon.gke.io/node-local-dns-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"node-local-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"},{\"configMap\":{\"items\":[{\"key\":\"Corefile\",\"path\":\"Corefile.base\"}],\"name\":\"node-local-dns\"},\"name\":\"config-volume\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"}}}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "node-local-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:host": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":9253,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/coredns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/kube-dns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:addon.gke.io/node-local-dns-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "53114241", - "uid": "5069e9ba-0784-41bf-9577-3757bcb3b6d6" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "node-local-dns" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "nodelocaldns", - "components.gke.io/component-version": "1.4.0", - "prometheus.io/port": "9253", - "prometheus.io/scrape": "true" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "node-local-dns" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-localip", - "169.254.20.10,10.72.0.10", - "-conf", - "/etc/Corefile", - "-upstreamsvc", - "kube-dns-upstream", - "-kubednscm", - "/etc/kube-dns" - ], - "image": "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "host": "169.254.20.10", - "path": "/health", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "node-cache", - "ports": [ - { - "containerPort": 53, - "hostPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "hostPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - }, - { - "containerPort": 9253, - "hostPort": 9253, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "25m", - "memory": "5Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/etc/coredns", - "name": "config-volume" - }, - { - "mountPath": "/etc/kube-dns", - "name": "kube-dns-config" - } - ] - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "addon.gke.io/node-local-dns-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "node-local-dns", - "serviceAccountName": "node-local-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "Corefile", - "path": "Corefile.base" - } - ], - "name": "node-local-dns" - }, - "name": "config-volume" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 2, - "updatedNumberScheduled": 7 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: nvidia-gpu-device-plugin is defined as privileged:", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 3, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"nvidia-gpu-device-plugin\"},\"name\":\"nvidia-gpu-device-plugin\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"cloud.google.com/gke-accelerator\",\"operator\":\"Exists\"}]}]}}},\"containers\":[{\"command\":[\"/usr/bin/nvidia-gpu-device-plugin\",\"-logtostderr\",\"--enable-container-gpu-metrics\",\"--enable-health-monitoring\"],\"env\":[{\"name\":\"LD_LIBRARY_PATH\",\"value\":\"/usr/local/nvidia/lib64\"}],\"image\":\"gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317\",\"name\":\"nvidia-gpu-device-plugin\",\"ports\":[{\"containerPort\":2112,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/device-plugin\",\"name\":\"device-plugin\"},{\"mountPath\":\"/dev\",\"name\":\"dev\"},{\"mountPath\":\"/usr/local/nvidia\",\"name\":\"nvidia\"},{\"mountPath\":\"/var/lib/kubelet/pod-resources\",\"name\":\"pod-resources\"},{\"mountPath\":\"/proc\",\"name\":\"proc\"},{\"mountPath\":\"/etc/nvidia\",\"name\":\"nvidia-config\"}]}],\"priorityClassName\":\"system-node-critical\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/device-plugins\"},\"name\":\"device-plugin\"},{\"hostPath\":{\"path\":\"/dev\"},\"name\":\"dev\"},{\"hostPath\":{\"path\":\"/home/kubernetes/bin/nvidia\",\"type\":\"Directory\"},\"name\":\"nvidia\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/pod-resources\"},\"name\":\"pod-resources\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"proc\"},{\"hostPath\":{\"path\":\"/etc/nvidia\"},\"name\":\"nvidia-config\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:17Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "nvidia-gpu-device-plugin" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:nodeAffinity": { - ".": {}, - "f:requiredDuringSchedulingIgnoredDuringExecution": { - ".": {}, - "f:nodeSelectorTerms": {} - } - } - }, - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"LD_LIBRARY_PATH\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":2112,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/device-plugin\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/local/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet/pod-resources\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"dev\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"device-plugin\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"nvidia\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"pod-resources\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - "f:command": {}, - "f:image": {}, - "f:volumeMounts": { - "k:{\"mountPath\":\"/etc/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/proc\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:volumes": { - "k:{\"name\":\"nvidia-config\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"proc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "nvidia-gpu-device-plugin", - "namespace": "kube-system", - "resourceVersion": "25934477", - "uid": "14396a20-ecee-4671-aefe-2a5b9d2e0dde" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "spec": { - "affinity": { - "nodeAffinity": { - "requiredDuringSchedulingIgnoredDuringExecution": { - "nodeSelectorTerms": [ - { - "matchExpressions": [ - { - "key": "cloud.google.com/gke-accelerator", - "operator": "Exists" - } - ] - } - ] - } - } - }, - "containers": [ - { - "command": [ - "/usr/bin/nvidia-gpu-device-plugin", - "-logtostderr", - "--enable-container-gpu-metrics", - "--enable-health-monitoring" - ], - "env": [ - { - "name": "LD_LIBRARY_PATH", - "value": "/usr/local/nvidia/lib64" - } - ], - "image": "gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317", - "imagePullPolicy": "IfNotPresent", - "name": "nvidia-gpu-device-plugin", - "ports": [ - { - "containerPort": 2112, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "20Mi" - }, - "requests": { - "cpu": "50m", - "memory": "20Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/device-plugin", - "name": "device-plugin" - }, - { - "mountPath": "/dev", - "name": "dev" - }, - { - "mountPath": "/usr/local/nvidia", - "name": "nvidia" - }, - { - "mountPath": "/var/lib/kubelet/pod-resources", - "name": "pod-resources" - }, - { - "mountPath": "/proc", - "name": "proc" - }, - { - "mountPath": "/etc/nvidia", - "name": "nvidia-config" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/device-plugins", - "type": "" - }, - "name": "device-plugin" - }, - { - "hostPath": { - "path": "/dev", - "type": "" - }, - "name": "dev" - }, - { - "hostPath": { - "path": "/home/kubernetes/bin/nvidia", - "type": "Directory" - }, - "name": "nvidia" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/pod-resources", - "type": "" - }, - "name": "pod-resources" - }, - { - "hostPath": { - "path": "/proc", - "type": "" - }, - "name": "proc" - }, - { - "hostPath": { - "path": "/etc/nvidia", - "type": "" - }, - "name": "nvidia-config" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 2 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: pdcsi-node is defined as privileged:", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 3, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - } - ] - } - } - ], - "listInputResources": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-audit\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-audit\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CONFIG_FILES\",\"value\":\"/config/config.json\"},{\"name\":\"CA_SERVER_TYPE\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"cluster_kind\",\"name\":\"ca-audit\"}}}],\"image\":\"quay.io/armosec/k8s-ca-auditlog-ubi:21\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-audit\",\"ports\":[{\"containerPort\":443,\"name\":\"ca-audit-port\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/config\",\"name\":\"ca-audit\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-audit\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"config\",\"path\":\"config.json\"}],\"name\":\"ca-audit\"},\"name\":\"ca-audit\"},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:54Z", - "generation": 1, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CONFIG_FILES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_SERVER_TYPE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:54Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-audit", - "namespace": "cyberarmor-system", - "resourceVersion": "60787209", - "uid": "687f52ea-6956-4e8a-bb8c-7ea35a04b3f0" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-audit" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CONFIG_FILES", - "value": "/config/config.json" - }, - { - "name": "CA_SERVER_TYPE", - "valueFrom": { - "configMapKeyRef": { - "key": "cluster_kind", - "name": "ca-audit" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-auditlog-ubi:21", - "imagePullPolicy": "Always", - "name": "ca-audit", - "ports": [ - { - "containerPort": 443, - "name": "ca-audit-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/config", - "name": "ca-audit", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-audit", - "serviceAccountName": "ca-audit", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "config", - "path": "config.json" - } - ], - "name": "ca-audit" - }, - "name": "ca-audit" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:54Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-audit-c667df747\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-dashboard-aggregator\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-dashboard-aggregator\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-configtype=1\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-dashboard-aggregator\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"40Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:55Z", - "generation": 1, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-dashboard-aggregator\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:55Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T23:55:20Z" - } - ], - "name": "ca-dashboard-aggregator", - "namespace": "cyberarmor-system", - "resourceVersion": "61250607", - "uid": "0ba23569-e254-4388-b22f-30cc1eca031b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-dashboard-aggregator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-configtype=1", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173", - "imagePullPolicy": "Always", - "name": "ca-dashboard-aggregator", - "resources": { - "limits": { - "cpu": "200m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "40Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:18:55Z", - "lastUpdateTime": "2021-10-12T00:19:19Z", - "message": "ReplicaSet \"ca-dashboard-aggregator-5b8bdbc8f5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-12T23:55:20Z", - "lastUpdateTime": "2021-10-12T23:55:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-notification-server\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-notification-server\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"maserNotificationServer\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\",\"value\":\"customerGUID\"},{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\",\"value\":\"8001\"},{\"name\":\"CA_NOTIFICATION_SERVER_PORT\",\"value\":\"8002\"}],\"image\":\"quay.io/armosec/notification-server-ubi:89\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-notification-server\",\"ports\":[{\"containerPort\":8001,\"name\":\"websocket\"},{\"containerPort\":8002,\"name\":\"rest-api\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:59Z", - "generation": 1, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-notification-server\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8001,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:59Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:11Z" - } - ], - "name": "ca-notification-server", - "namespace": "cyberarmor-system", - "resourceVersion": "60787036", - "uid": "8c3dc6fe-e730-4364-8445-dc5a05ad2b0f" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-notification-server" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_HOST", - "valueFrom": { - "configMapKeyRef": { - "key": "maserNotificationServer", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_ATTRIBUTES", - "value": "customerGUID" - }, - { - "name": "CA_NOTIFICATION_SERVER_WS_PORT", - "value": "8001" - }, - { - "name": "CA_NOTIFICATION_SERVER_PORT", - "value": "8002" - } - ], - "image": "quay.io/armosec/notification-server-ubi:89", - "imagePullPolicy": "Always", - "name": "ca-notification-server", - "ports": [ - { - "containerPort": 8001, - "name": "websocket", - "protocol": "TCP" - }, - { - "containerPort": 8002, - "name": "rest-api", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "50Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:11Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:59Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "ReplicaSet \"ca-notification-server-6fd966c875\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-ocimage\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-ocimage\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-ocimage:63\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-ocimage\",\"ports\":[{\"containerPort\":8080,\"name\":\"ca-ocimage-port\"}],\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:51Z", - "generation": 1, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-ocimage\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:04Z" - } - ], - "name": "ca-ocimage", - "namespace": "cyberarmor-system", - "resourceVersion": "60786986", - "uid": "a6d37edf-b144-4677-91b3-73c73d9c7df6" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-ocimage" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-ocimage:63", - "imagePullPolicy": "Always", - "name": "ca-ocimage", - "ports": [ - { - "containerPort": 8080, - "name": "ca-ocimage-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "1", - "memory": "1000Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:04Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:51Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "ReplicaSet \"ca-ocimage-5576ff7d7d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-oracle\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-oracle\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_ORACLE_PORT\",\"value\":\"4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8002\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-oracle-ubi:11\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-oracle\",\"ports\":[{\"containerPort\":4000,\"name\":\"ca-oracle\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:19:01Z", - "generation": 1, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-oracle\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:19:01Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-oracle", - "namespace": "cyberarmor-system", - "resourceVersion": "60787203", - "uid": "da3dd21c-bf13-4d2a-97da-ca80b94d08d3" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-oracle" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_ORACLE_PORT", - "value": "4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8002" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-oracle-ubi:11", - "imagePullPolicy": "Always", - "name": "ca-oracle", - "ports": [ - { - "containerPort": 4000, - "name": "ca-oracle", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:19:01Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-oracle-6c98c6bdbf\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-posture\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-posture\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8001\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-posture-ubi:112\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-posture\",\"ports\":[{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/resources/config\",\"name\":\"ca-posture-score-config\",\"readOnly\":false},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"},{\"configMap\":{\"items\":[{\"key\":\"resourcesdict.json\",\"path\":\"resourcesdict.json\"},{\"key\":\"frameworkdict.json\",\"path\":\"frameworkdict.json\"}],\"name\":\"ca-posture-score-config\"},\"name\":\"ca-posture-score-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:58Z", - "generation": 1, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-posture\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/resources/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-posture-score-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:58Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:45Z" - } - ], - "name": "ca-posture", - "namespace": "cyberarmor-system", - "resourceVersion": "60787259", - "uid": "f41f4dc1-cfb0-4201-bca7-f1cf0b72b6b7" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-posture" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8001" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-posture-ubi:112", - "imagePullPolicy": "Always", - "name": "ca-posture", - "ports": [ - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "500m", - "memory": "100Mi" - }, - "requests": { - "cpu": "100m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/resources/config", - "name": "ca-posture-score-config" - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "resourcesdict.json", - "path": "resourcesdict.json" - }, - { - "key": "frameworkdict.json", - "path": "frameworkdict.json" - } - ], - "name": "ca-posture-score-config" - }, - "name": "ca-posture-score-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:45Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:58Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "ReplicaSet \"ca-posture-5996968d7b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-rbac\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-rbac\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"S3_BUCKET\",\"value\":\"ca-kubernetes-rbac-db-dev\"},{\"name\":\"AWS_REGION\",\"value\":\"eu-west-1\"},{\"name\":\"AWS_ACCESS_KEY_ID\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keyid\",\"name\":\"ca-rbac\"}}},{\"name\":\"AWS_SECRET_ACCESS_KEY\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keysecret\",\"name\":\"ca-rbac\"}}}],\"image\":\"quay.io/armosec/k8s-ca-rbac-scanner-ubi:20\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-rbac\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"400Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:50Z", - "generation": 1, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-rbac\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AWS_ACCESS_KEY_ID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"AWS_REGION\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"AWS_SECRET_ACCESS_KEY\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"S3_BUCKET\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:13Z" - } - ], - "name": "ca-rbac", - "namespace": "cyberarmor-system", - "resourceVersion": "60787051", - "uid": "d5898a09-2489-4254-b210-0725ddb2427a" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-rbac" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "S3_BUCKET", - "value": "ca-kubernetes-rbac-db-dev" - }, - { - "name": "AWS_REGION", - "value": "eu-west-1" - }, - { - "name": "AWS_ACCESS_KEY_ID", - "valueFrom": { - "secretKeyRef": { - "key": "keyid", - "name": "ca-rbac" - } - } - }, - { - "name": "AWS_SECRET_ACCESS_KEY", - "valueFrom": { - "secretKeyRef": { - "key": "keysecret", - "name": "ca-rbac" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-rbac-scanner-ubi:20", - "imagePullPolicy": "Always", - "name": "ca-rbac", - "resources": { - "limits": { - "cpu": "200m", - "memory": "400Mi" - }, - "requests": { - "cpu": "10m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:13Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:50Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "ReplicaSet \"ca-rbac-75c8cfd6b4\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-vuln-scan\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-vuln-scan\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"EVENT_RECEIVER_URL\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\",\"value\":\"4\"}],\"image\":\"quay.io/armosec/k8s-ca-vuln-scan-ubi:84\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-vuln-scan\",\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1.5Gi\"},\"requests\":{\"cpu\":\"500m\",\"memory\":\"1Gi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:47Z", - "generation": 1, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-vuln-scan\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EVENT_RECEIVER_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:00Z" - } - ], - "name": "ca-vuln-scan", - "namespace": "cyberarmor-system", - "resourceVersion": "60786938", - "uid": "9ea3d6cb-c6c0-423f-aab2-630827939285" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-vuln-scan" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "EVENT_RECEIVER_URL", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_MAX_VULN_SCAN_ROUTINS", - "value": "4" - } - ], - "image": "quay.io/armosec/k8s-ca-vuln-scan-ubi:84", - "imagePullPolicy": "Always", - "name": "ca-vuln-scan", - "resources": { - "limits": { - "cpu": "1", - "memory": "1536Mi" - }, - "requests": { - "cpu": "500m", - "memory": "1Gi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:00Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:47Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "ReplicaSet \"ca-vuln-scan-75b499df8c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-webhook\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-webhook\"}},\"template\":{\"metadata\":{\"annotations\":{\"certificate\":\"d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt\"},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-tlsCertFile=/etc/webhook/certs/tls.crt\",\"-tlsKeyFile=/etc/webhook/certs/tls.key\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_WEBHOOK_NAME\",\"value\":\"ca-webhook\"},{\"name\":\"CA_WEBHOOK_PORT\",\"value\":\"443\"},{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_LOGIN_SECRET_NAME\",\"value\":\"ca-login\"},{\"name\":\"CA_ORACLE_SERVER\",\"value\":\"http://ca-oracle:4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"http://ca-notification-server:8001\"},{\"name\":\"CA_OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-webhook-ubi:606\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-webhook\",\"ports\":[{\"containerPort\":443,\"name\":\"mutating-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"600Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"100Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/cazips\",\"name\":\"zip-download\"},{\"mountPath\":\"/etc/webhook/certs\",\"name\":\"ca-cluster-certificate\",\"readOnly\":true},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"emptyDir\":{},\"name\":\"zip-download\"},{\"name\":\"ca-cluster-certificate\",\"secret\":{\"secretName\":\"ca-cluster-certificate\"}},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:46Z", - "generation": 1, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:certificate": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-webhook\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_LOGIN_SECRET_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/cazips\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/webhook/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-cluster-certificate\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"zip-download\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:16Z" - } - ], - "name": "ca-webhook", - "namespace": "cyberarmor-system", - "resourceVersion": "60787072", - "uid": "c968fe90-8480-471f-bdf1-fa98447ce1d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-webhook" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "certificate": "d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt" - }, - "creationTimestamp": null, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-tlsCertFile=/etc/webhook/certs/tls.crt", - "-tlsKeyFile=/etc/webhook/certs/tls.key", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_WEBHOOK_NAME", - "value": "ca-webhook" - }, - { - "name": "CA_WEBHOOK_PORT", - "value": "443" - }, - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_LOGIN_SECRET_NAME", - "value": "ca-login" - }, - { - "name": "CA_ORACLE_SERVER", - "value": "http://ca-oracle:4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "http://ca-notification-server:8001" - }, - { - "name": "CA_OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-webhook-ubi:606", - "imagePullPolicy": "Always", - "name": "ca-webhook", - "ports": [ - { - "containerPort": 443, - "name": "mutating-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "600Mi" - }, - "requests": { - "cpu": "300m", - "memory": "100Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/cazips", - "name": "zip-download" - }, - { - "mountPath": "/etc/webhook/certs", - "name": "ca-cluster-certificate", - "readOnly": true - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "emptyDir": {}, - "name": "zip-download" - }, - { - "name": "ca-cluster-certificate", - "secret": { - "defaultMode": 420, - "secretName": "ca-cluster-certificate" - } - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:16Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:46Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "ReplicaSet \"ca-webhook-7dd8bbd798\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-websocket\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-websocket\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_VULN_SCAN_SCHEDULE\",\"value\":\"@every 11h\"},{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\",\"value\":\"@every 12h\"},{\"name\":\"CA_DEBUG_SIGNER\",\"value\":null}],\"image\":\"quay.io/armosec/k8s-ca-websocket-ubi:406\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-websocket\",\"ports\":[{\"containerPort\":4002,\"name\":\"trigger-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:43Z", - "generation": 1, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-websocket\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_DEBUG_SIGNER\"}": { - ".": {}, - "f:name": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_VULN_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:14Z" - } - ], - "name": "ca-websocket", - "namespace": "cyberarmor-system", - "resourceVersion": "60787065", - "uid": "914f30e9-d858-4945-9314-cbd3422ebaab" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-websocket" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_VULN_SCAN_SCHEDULE", - "value": "@every 11h" - }, - { - "name": "CA_POSTURE_SCAN_SCHEDULE", - "value": "@every 12h" - }, - { - "name": "CA_DEBUG_SIGNER" - } - ], - "image": "quay.io/armosec/k8s-ca-websocket-ubi:406", - "imagePullPolicy": "Always", - "name": "ca-websocket", - "ports": [ - { - "containerPort": 4002, - "name": "trigger-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "1000Mi" - }, - "requests": { - "cpu": "300m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:14Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:43Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "ReplicaSet \"ca-websocket-857758846f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"adservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"adservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"adservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/adservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"name\":\"server\",\"ports\":[{\"containerPort\":9555}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"180Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:51Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":9555,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:12Z" - } - ], - "name": "adservice", - "namespace": "hipster", - "resourceVersion": "61263240", - "uid": "368bea36-82be-4c28-8607-cf931a836185" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "adservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6415784d-d96b-4866-9c10-d571c8d8fd35", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:29", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-adservice" - }, - "creationTimestamp": null, - "labels": { - "app": "adservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/adservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 9555, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "300Mi" - }, - "requests": { - "cpu": "200m", - "memory": "180Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:24Z", - "lastUpdateTime": "2021-10-12T00:12:24Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:51Z", - "lastUpdateTime": "2021-10-13T00:28:12Z", - "message": "ReplicaSet \"adservice-7864446d5c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"cartservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"cartservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"cartservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"REDIS_ADDR\",\"value\":\"redis-cart:6379\"}],\"image\":\"gcr.io/google-samples/microservices-demo/cartservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15,\"periodSeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":7070}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:47Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"REDIS_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7070,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T09:40:08Z" - } - ], - "name": "cartservice", - "namespace": "hipster", - "resourceVersion": "61443544", - "uid": "df767287-ffc1-4559-b7fd-32b09bf6208c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "cartservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "7ced7c5c-c483-40b3-b6bc-8829339dc3e1", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:04", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-cartservice" - }, - "creationTimestamp": null, - "labels": { - "app": "cartservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "REDIS_ADDR", - "value": "redis-cart:6379" - } - ], - "image": "gcr.io/google-samples/microservices-demo/cartservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7070, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "128Mi" - }, - "requests": { - "cpu": "200m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-13T00:27:35Z", - "message": "ReplicaSet \"cartservice-7c8f8f9ddd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T09:40:08Z", - "lastUpdateTime": "2021-10-13T09:40:08Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"checkoutservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"checkoutservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"checkoutservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"5050\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"PAYMENT_SERVICE_ADDR\",\"value\":\"paymentservice:50051\"},{\"name\":\"EMAIL_SERVICE_ADDR\",\"value\":\"emailservice:5000\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"}],\"image\":\"gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":5050}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:42Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EMAIL_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PAYMENT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":5050,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:42Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:41Z" - } - ], - "name": "checkoutservice", - "namespace": "hipster", - "resourceVersion": "61262985", - "uid": "b5e6a8d8-1ec6-4acc-bf14-e3bb28bff284" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "checkoutservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "bebad8bb-8728-4813-ae19-d22a38a289a5", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:28", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-checkoutservice" - }, - "creationTimestamp": null, - "labels": { - "app": "checkoutservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "5050" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "PAYMENT_SERVICE_ADDR", - "value": "paymentservice:50051" - }, - { - "name": "EMAIL_SERVICE_ADDR", - "value": "emailservice:5000" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - } - ], - "image": "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 5050, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T14:05:32Z", - "lastUpdateTime": "2021-10-12T14:05:32Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:42Z", - "lastUpdateTime": "2021-10-13T00:27:42Z", - "message": "ReplicaSet \"checkoutservice-86c564466c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"currencyservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"currencyservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"currencyservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"7000\"}],\"image\":\"gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":7000,\"name\":\"grpc\"}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T08:37:54Z" - } - ], - "name": "currencyservice", - "namespace": "hipster", - "resourceVersion": "61423238", - "uid": "167b75e1-1be2-4764-aaad-dbb1ae248d3c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "currencyservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "4aa34494-0348-4859-9e29-56df9baf52ba", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-currencyservice" - }, - "creationTimestamp": null, - "labels": { - "app": "currencyservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "7000" - } - ], - "image": "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7000, - "name": "grpc", - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:29:19Z", - "message": "ReplicaSet \"currencyservice-544b6d849c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T08:37:54Z", - "lastUpdateTime": "2021-10-13T08:37:54Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"emailservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"emailservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"emailservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"DISABLE_PROFILER\",\"value\":\"1\"}],\"image\":\"gcr.io/google-samples/microservices-demo/emailservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:41Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"DISABLE_PROFILER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:41Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:07Z" - } - ], - "name": "emailservice", - "namespace": "hipster", - "resourceVersion": "61263204", - "uid": "9959433f-c964-4e6d-a2d7-3d1b9b617948" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "emailservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "e8aa9826-2367-44e1-9aad-a6d617b0fa06", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:48", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-emailservice" - }, - "creationTimestamp": null, - "labels": { - "app": "emailservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "DISABLE_PROFILER", - "value": "1" - } - ], - "image": "gcr.io/google-samples/microservices-demo/emailservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-12T00:11:47Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:41Z", - "lastUpdateTime": "2021-10-13T00:28:08Z", - "message": "ReplicaSet \"emailservice-cc7c4cd87\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"frontend\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"frontend\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"frontend\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"},{\"name\":\"RECOMMENDATION_SERVICE_ADDR\",\"value\":\"recommendationservice:8080\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"CHECKOUT_SERVICE_ADDR\",\"value\":\"checkoutservice:5050\"},{\"name\":\"AD_SERVICE_ADDR\",\"value\":\"adservice:9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/frontend:v0.2.3\",\"livenessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-liveness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-readiness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:44Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AD_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CHECKOUT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"RECOMMENDATION_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:44Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:34Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:22Z" - } - ], - "name": "frontend", - "namespace": "hipster", - "resourceVersion": "61263336", - "uid": "86b92d9e-22ad-4f0a-be26-41343f05f0d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "frontend" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9611f05f-4a8b-48ff-9722-e6a2ec702d65", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:57", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-frontend", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "frontend", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - }, - { - "name": "RECOMMENDATION_SERVICE_ADDR", - "value": "recommendationservice:8080" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "CHECKOUT_SERVICE_ADDR", - "value": "checkoutservice:5050" - }, - { - "name": "AD_SERVICE_ADDR", - "value": "adservice:9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/frontend:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-liveness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-readiness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:04Z", - "lastUpdateTime": "2021-10-12T00:12:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:44Z", - "lastUpdateTime": "2021-10-13T00:28:23Z", - "message": "ReplicaSet \"frontend-c747f6f47\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"loadgenerator\",\"namespace\":\"hipster\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"loadgenerator\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"loadgenerator\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"FRONTEND_ADDR\",\"value\":\"frontend:80\"},{\"name\":\"USERS\",\"value\":\"10\"}],\"image\":\"gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3\",\"name\":\"main\",\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"256Mi\"}}}],\"restartPolicy\":\"Always\",\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"main\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"FRONTEND_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"USERS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:38Z" - } - ], - "name": "loadgenerator", - "namespace": "hipster", - "resourceVersion": "61263451", - "uid": "e9200650-d25d-43f2-b1bc-4615beaed50c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "loadgenerator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "baca3d0f-fdc8-42c6-a9b1-ee29b3d173e0", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:26", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-loadgenerator", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "loadgenerator", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "FRONTEND_ADDR", - "value": "frontend:80" - }, - { - "name": "USERS", - "value": "10" - } - ], - "image": "gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "name": "main", - "resources": { - "limits": { - "cpu": "500m", - "memory": "512Mi" - }, - "requests": { - "cpu": "300m", - "memory": "256Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-13T00:24:15Z", - "lastUpdateTime": "2021-10-13T00:24:15Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:28:38Z", - "message": "ReplicaSet \"loadgenerator-6dcb6ffc4f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"paymentservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"paymentservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"paymentservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:45Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:45Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:29:27Z" - } - ], - "name": "paymentservice", - "namespace": "hipster", - "resourceVersion": "61263785", - "uid": "ab21c30f-d153-4ea8-982e-e12a71745dae" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "paymentservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "60b5720d-99b5-47a0-8bc4-656b372a6d17", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:52", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-paymentservice" - }, - "creationTimestamp": null, - "labels": { - "app": "paymentservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:45Z", - "lastUpdateTime": "2021-10-13T00:29:27Z", - "message": "ReplicaSet \"paymentservice-849b876ffd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"productcatalogservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"productcatalogservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"productcatalogservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":3550}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:46Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":3550,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:57Z" - } - ], - "name": "productcatalogservice", - "namespace": "hipster", - "resourceVersion": "61263117", - "uid": "50b29b6e-0f97-43b8-9555-a53d9c0e18f9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "productcatalogservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9bb4cc06-3907-401b-919f-c2974a623068", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-productcatalogservice" - }, - "creationTimestamp": null, - "labels": { - "app": "productcatalogservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 3550, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:46Z", - "lastUpdateTime": "2021-10-13T00:27:57Z", - "message": "ReplicaSet \"productcatalogservice-586fd876d5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"recommendationservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"recommendationservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"recommendationservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"450Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"220Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:43Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:37Z" - } - ], - "name": "recommendationservice", - "namespace": "hipster", - "resourceVersion": "61263443", - "uid": "00437f28-24c4-4759-ab93-f0be948eabc9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "recommendationservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "8cace306-b3ce-4f2f-8a6f-b122873b4eee", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-recommendationservice" - }, - "creationTimestamp": null, - "labels": { - "app": "recommendationservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "450Mi" - }, - "requests": { - "cpu": "100m", - "memory": "220Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-12T00:11:50Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:43Z", - "lastUpdateTime": "2021-10-13T00:28:37Z", - "message": "ReplicaSet \"recommendationservice-54b7b7b95d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"redis-cart\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"redis-cart\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"redis-cart\"}},\"spec\":{\"containers\":[{\"image\":\"redis:alpine\",\"livenessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"name\":\"redis\",\"ports\":[{\"containerPort\":6379}],\"readinessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"resources\":{\"limits\":{\"cpu\":\"125m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"70m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/data\",\"name\":\"redis-data\"}]}],\"volumes\":[{\"emptyDir\":{},\"name\":\"redis-data\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:50Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"redis\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":6379,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/data\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"redis-data\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:38Z" - } - ], - "name": "redis-cart", - "namespace": "hipster", - "resourceVersion": "61262948", - "uid": "76b3aebb-9ec5-479e-81ae-975ccf1bc6ec" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "redis-cart" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "838a7c21-618b-4693-a13b-838a9231ca58", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-redis-cart" - }, - "creationTimestamp": null, - "labels": { - "app": "redis-cart", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "image": "redis:alpine", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "name": "redis", - "ports": [ - { - "containerPort": 6379, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "125m", - "memory": "256Mi" - }, - "requests": { - "cpu": "70m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/data", - "name": "redis-data" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "emptyDir": {}, - "name": "redis-data" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:57Z", - "lastUpdateTime": "2021-10-12T00:11:57Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-13T00:27:38Z", - "message": "ReplicaSet \"redis-cart-594778c8b9\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"shippingservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"shippingservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"shippingservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:49Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:49Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:11Z" - } - ], - "name": "shippingservice", - "namespace": "hipster", - "resourceVersion": "61262726", - "uid": "febd2fe5-0e28-448e-aabd-31904ebb82a9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "shippingservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6503b850-839c-4b73-95ab-195d27b3c10d", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:26:58", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-shippingservice" - }, - "creationTimestamp": null, - "labels": { - "app": "shippingservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:00Z", - "lastUpdateTime": "2021-10-12T00:12:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:49Z", - "lastUpdateTime": "2021-10-13T00:27:11Z", - "message": "ReplicaSet \"shippingservice-758c9b4d4b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":\"10%\",\"maxUnavailable\":0}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"kubedns\",\"prometheus.io/port\":\"10054\",\"prometheus.io/scrape\":\"true\",\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"labels\":{\"k8s-app\":\"kube-dns\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchExpressions\":[{\"key\":\"k8s-app\",\"operator\":\"In\",\"values\":[\"kube-dns\"]}]},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"--domain=cluster.local.\",\"--dns-port=10053\",\"--config-dir=/kube-dns-config\",\"--v=2\"],\"env\":[{\"name\":\"PROMETHEUS_PORT\",\"value\":\"10055\"}],\"image\":\"gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/kubedns\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"kubedns\",\"ports\":[{\"containerPort\":10053,\"name\":\"dns-local\",\"protocol\":\"UDP\"},{\"containerPort\":10053,\"name\":\"dns-tcp-local\",\"protocol\":\"TCP\"},{\"containerPort\":10055,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readiness\",\"port\":8081,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":3,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"memory\":\"210Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"70Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001},\"volumeMounts\":[{\"mountPath\":\"/kube-dns-config\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"-v=2\",\"-logtostderr\",\"-configDir=/etc/k8s/dns/dnsmasq-nanny\",\"-restartDnsmasq=true\",\"--\",\"-k\",\"--cache-size=1000\",\"--no-negcache\",\"--dns-forward-max=1500\",\"--log-facility=-\",\"--server=/cluster.local/127.0.0.1#10053\",\"--server=/in-addr.arpa/127.0.0.1#10053\",\"--server=/ip6.arpa/127.0.0.1#10053\"],\"image\":\"gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/dnsmasq\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"dnsmasq\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"150m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"capabilities\":{\"add\":[\"NET_BIND_SERVICE\",\"SETGID\"],\"drop\":[\"all\"]}},\"volumeMounts\":[{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"--v=2\",\"--logtostderr\",\"--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV\",\"--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV\"],\"image\":\"gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/metrics\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"sidecar\",\"ports\":[{\"containerPort\":10054,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001}}],\"dnsPolicy\":\"Default\",\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 4, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:scheduler.alpha.kubernetes.io/critical-pod": {}, - "f:seccomp.security.alpha.kubernetes.io/pod": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:podAntiAffinity": { - ".": {}, - "f:preferredDuringSchedulingIgnoredDuringExecution": {} - } - }, - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:capabilities": { - ".": {}, - "f:add": {}, - "f:drop": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"kubedns\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PROMETHEUS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10053,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10053,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10055,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/kube-dns-config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"sidecar\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10054,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - "f:image": {} - }, - "k:{\"name\":\"kubedns\"}": { - "f:image": {} - }, - "k:{\"name\":\"sidecar\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:06:26Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "53109905", - "uid": "cd5cca24-7cd2-4548-a5d3-d90beb79f9e8" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 2, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "10%", - "maxUnavailable": 0 - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "kubedns", - "prometheus.io/port": "10054", - "prometheus.io/scrape": "true", - "scheduler.alpha.kubernetes.io/critical-pod": "", - "seccomp.security.alpha.kubernetes.io/pod": "runtime/default" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns" - } - }, - "spec": { - "affinity": { - "podAntiAffinity": { - "preferredDuringSchedulingIgnoredDuringExecution": [ - { - "podAffinityTerm": { - "labelSelector": { - "matchExpressions": [ - { - "key": "k8s-app", - "operator": "In", - "values": [ - "kube-dns" - ] - } - ] - }, - "topologyKey": "kubernetes.io/hostname" - }, - "weight": 100 - } - ] - } - }, - "containers": [ - { - "args": [ - "--domain=cluster.local.", - "--dns-port=10053", - "--config-dir=/kube-dns-config", - "--v=2" - ], - "env": [ - { - "name": "PROMETHEUS_PORT", - "value": "10055" - } - ], - "image": "gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/kubedns", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "kubedns", - "ports": [ - { - "containerPort": 10053, - "name": "dns-local", - "protocol": "UDP" - }, - { - "containerPort": 10053, - "name": "dns-tcp-local", - "protocol": "TCP" - }, - { - "containerPort": 10055, - "name": "metrics", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/readiness", - "port": 8081, - "scheme": "HTTP" - }, - "initialDelaySeconds": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "resources": { - "limits": { - "memory": "210Mi" - }, - "requests": { - "cpu": "100m", - "memory": "70Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/kube-dns-config", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "-v=2", - "-logtostderr", - "-configDir=/etc/k8s/dns/dnsmasq-nanny", - "-restartDnsmasq=true", - "--", - "-k", - "--cache-size=1000", - "--no-negcache", - "--dns-forward-max=1500", - "--log-facility=-", - "--server=/cluster.local/127.0.0.1#10053", - "--server=/in-addr.arpa/127.0.0.1#10053", - "--server=/ip6.arpa/127.0.0.1#10053" - ], - "image": "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/dnsmasq", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "dnsmasq", - "ports": [ - { - "containerPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "150m", - "memory": "20Mi" - } - }, - "securityContext": { - "capabilities": { - "add": [ - "NET_BIND_SERVICE", - "SETGID" - ], - "drop": [ - "all" - ] - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/k8s/dns/dnsmasq-nanny", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "--v=2", - "--logtostderr", - "--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV", - "--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV" - ], - "image": "gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/metrics", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "sidecar", - "ports": [ - { - "containerPort": 10054, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns", - "serviceAccountName": "kube-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 2, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-09-11T01:57:38Z", - "message": "ReplicaSet \"kube-dns-59844ff879\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:06:26Z", - "lastUpdateTime": "2021-09-25T17:06:26Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 4, - "readyReplicas": 2, - "replicas": 2, - "updatedReplicas": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns-autoscaler\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns-autoscaler\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"spec\":{\"containers\":[{\"command\":[\"/cluster-proportional-autoscaler\",\"--namespace=kube-system\",\"--configmap=kube-dns-autoscaler\",\"--target=Deployment/kube-dns\",\"--default-params={\\\"linear\\\":{\\\"coresPerReplica\\\":256,\\\"nodesPerReplica\\\":16,\\\"preventSinglePointFailure\\\":true,\\\"includeUnschedulableNodes\\\":true}}\",\"--logtostderr=true\",\"--v=2\"],\"image\":\"gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0\",\"name\":\"autoscaler\",\"resources\":{\"requests\":{\"cpu\":\"20m\",\"memory\":\"10Mi\"}}}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"seccompProfile\":{\"type\":\"RuntimeDefault\"},\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns-autoscaler\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns-autoscaler", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"autoscaler\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:02:52Z" - } - ], - "name": "kube-dns-autoscaler", - "namespace": "kube-system", - "resourceVersion": "53108562", - "uid": "c84ce079-f3c8-46ba-871f-0f2d42ffee1e" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/cluster-proportional-autoscaler", - "--namespace=kube-system", - "--configmap=kube-dns-autoscaler", - "--target=Deployment/kube-dns", - "--default-params={\"linear\":{\"coresPerReplica\":256,\"nodesPerReplica\":16,\"preventSinglePointFailure\":true,\"includeUnschedulableNodes\":true}}", - "--logtostderr=true", - "--v=2" - ], - "image": "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "autoscaler", - "resources": { - "requests": { - "cpu": "20m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "seccompProfile": { - "type": "RuntimeDefault" - }, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns-autoscaler", - "serviceAccountName": "kube-dns-autoscaler", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:54:39Z", - "message": "ReplicaSet \"kube-dns-autoscaler-844c9d9448\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:02:52Z", - "lastUpdateTime": "2021-09-25T17:02:52Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"glbc\",\"kubernetes.io/cluster-service\":\"true\",\"kubernetes.io/name\":\"GLBC\"},\"name\":\"l7-default-backend\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"glbc\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"glbc\",\"name\":\"glbc\"}},\"spec\":{\"containers\":[{\"image\":\"k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":30,\"timeoutSeconds\":5},\"name\":\"default-http-backend\",\"ports\":[{\"containerPort\":8080}],\"resources\":{\"limits\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}}}],\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"tolerations\":[{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "glbc", - "kubernetes.io/cluster-service": "true", - "kubernetes.io/name": "GLBC" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:kubernetes.io/name": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:name": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"default-http-backend\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:seccompProfile": { - "f:type": {} - } - }, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:01:20Z" - } - ], - "name": "l7-default-backend", - "namespace": "kube-system", - "resourceVersion": "53107969", - "uid": "32a76c03-37a1-44e9-b293-dd6b46ed274b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "glbc" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "glbc", - "name": "glbc" - } - }, - "spec": { - "containers": [ - { - "image": "k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 30, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "default-http-backend", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "10m", - "memory": "20Mi" - }, - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:56:25Z", - "message": "ReplicaSet \"l7-default-backend-56cb9644f6\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:01:20Z", - "lastUpdateTime": "2021-09-25T17:01:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "24", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metrics-server\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server-v0.3.6\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server\"},\"spec\":{\"containers\":[{\"command\":[\"/metrics-server\",\"--metric-resolution=30s\",\"--kubelet-port=10255\",\"--deprecated-kubelet-completely-insecure=true\",\"--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP\"],\"image\":\"k8s.gcr.io/metrics-server-amd64:v0.3.6\",\"name\":\"metrics-server\",\"ports\":[{\"containerPort\":443,\"name\":\"https\",\"protocol\":\"TCP\"}]},{\"command\":[\"/pod_nanny\",\"--config-dir=/etc/config\",\"--cpu=40m\",\"--extra-cpu=0.5m\",\"--memory=35Mi\",\"--extra-memory=4Mi\",\"--threshold=5\",\"--deployment=metrics-server-v0.3.6\",\"--container=metrics-server\",\"--poll-period=300000\",\"--estimator=exponential\",\"--scale-down-delay=24h\",\"--minClusterSize=5\",\"--use-metrics=true\"],\"env\":[{\"name\":\"MY_POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"MY_POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"gke.gcr.io/addon-resizer:1.8.11-gke.0\",\"name\":\"metrics-server-nanny\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"5m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"metrics-server-config-volume\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"metrics-server\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"metrics-server-config\"},\"name\":\"metrics-server-config-volume\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 24, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metrics-server", - "kubernetes.io/cluster-service": "true", - "version": "v0.3.6" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:version": {} - }, - "f:name": {} - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - }, - "k:{\"name\":\"metrics-server-nanny\"}": { - ".": {}, - "f:command": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"MY_POD_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"MY_POD_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"metrics-server-config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - "f:resources": { - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - } - } - } - } - } - } - }, - "manager": "pod_nanny", - "operation": "Update", - "time": "2021-06-13T13:42:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-26T17:13:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-26T17:13:52Z" - } - ], - "name": "metrics-server-v0.3.6", - "namespace": "kube-system", - "resourceVersion": "53582788", - "uid": "872d0f34-7998-45d3-9eea-570e0a47e03c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - }, - "name": "metrics-server" - }, - "spec": { - "containers": [ - { - "command": [ - "/metrics-server", - "--metric-resolution=30s", - "--kubelet-port=10255", - "--deprecated-kubelet-completely-insecure=true", - "--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP" - ], - "image": "k8s.gcr.io/metrics-server-amd64:v0.3.6", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server", - "ports": [ - { - "containerPort": 443, - "name": "https", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "44m", - "memory": "63Mi" - }, - "requests": { - "cpu": "44m", - "memory": "63Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - }, - { - "command": [ - "/pod_nanny", - "--config-dir=/etc/config", - "--cpu=40m", - "--extra-cpu=0.5m", - "--memory=35Mi", - "--extra-memory=4Mi", - "--threshold=5", - "--deployment=metrics-server-v0.3.6", - "--container=metrics-server", - "--poll-period=300000", - "--estimator=exponential", - "--scale-down-delay=24h", - "--minClusterSize=5", - "--use-metrics=true" - ], - "env": [ - { - "name": "MY_POD_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.name" - } - } - }, - { - "name": "MY_POD_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - } - ], - "image": "gke.gcr.io/addon-resizer:1.8.11-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server-nanny", - "resources": { - "limits": { - "cpu": "100m", - "memory": "300Mi" - }, - "requests": { - "cpu": "5m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "metrics-server-config-volume" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "serviceAccount": "metrics-server", - "serviceAccountName": "metrics-server", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "metrics-server-config" - }, - "name": "metrics-server-config-volume" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-09-25T17:12:33Z", - "lastUpdateTime": "2021-09-25T17:12:33Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-06-13T13:42:20Z", - "lastUpdateTime": "2021-09-26T17:13:52Z", - "message": "ReplicaSet \"metrics-server-v0.3.6-7889654bbb\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 24, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "6", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-proxy\"},\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-proxy\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-proxy\"}},\"spec\":{\"containers\":[{\"command\":[\"/bin/sh\",\"-c\",\"kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\\u003e\\u003e/var/log/kube-proxy.log 2\\u003e\\u00261\"],\"env\":[{\"name\":\"KUBERNETES_SERVICE_HOST\",\"value\":\"34.78.97.243\"}],\"image\":\"gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001\",\"name\":\"kube-proxy\",\"resources\":{\"requests\":{\"cpu\":\"100m\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/log\",\"name\":\"varlog\",\"readOnly\":false},{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/lib/modules\",\"name\":\"lib-modules\",\"readOnly\":true}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\",\"node.kubernetes.io/kube-proxy-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"kube-proxy\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/log\"},\"name\":\"varlog\"},{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"hostPath\":{\"path\":\"/lib/modules\"},\"name\":\"lib-modules\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "generation": 6, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-proxy" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBERNETES_SERVICE_HOST\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/kube-proxy-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - "f:command": {}, - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:44Z" - } - ], - "name": "kube-proxy", - "namespace": "kube-system", - "resourceVersion": "52161714", - "uid": "bb6f9ab0-e586-407b-95c0-773637c696e8" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-proxy" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-proxy" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "env": [ - { - "name": "KUBERNETES_SERVICE_HOST", - "value": "34.78.97.243" - } - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux", - "node.kubernetes.io/kube-proxy-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "kube-proxy", - "serviceAccountName": "kube-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 6 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"},\"name\":\"metadata-proxy-v0.1\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metadata-proxy\",\"version\":\"v0.1\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"}},\"spec\":{\"containers\":[{\"args\":[\"--addr=0.0.0.0:988\"],\"image\":\"k8s.gcr.io/metadata-proxy:v0.1.12\",\"name\":\"metadata-proxy\",\"resources\":{\"limits\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"},\"requests\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"}},\"securityContext\":{\"privileged\":true}}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"cloud.google.com/metadata-proxy-ready\":\"true\",\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"metadata-proxy\",\"terminationGracePeriodSeconds\":30,\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 3, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:cloud.google.com/metadata-proxy-ready": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - "f:args": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - } - ], - "name": "metadata-proxy-v0.1", - "namespace": "kube-system", - "resourceVersion": "25934435", - "uid": "94bf5845-f77b-47d4-bcec-e78549b4d8a3" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metadata-proxy", - "version": "v0.1" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--addr=0.0.0.0:988" - ], - "image": "k8s.gcr.io/metadata-proxy:v0.1.12", - "imagePullPolicy": "IfNotPresent", - "name": "metadata-proxy", - "resources": { - "limits": { - "cpu": "30m", - "memory": "25Mi" - }, - "requests": { - "cpu": "30m", - "memory": "25Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "cloud.google.com/metadata-proxy-ready": "true", - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "metadata-proxy", - "serviceAccountName": "metadata-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 3 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"node-local-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"node-local-dns\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"nodelocaldns\",\"components.gke.io/component-version\":\"1.4.0\",\"prometheus.io/port\":\"9253\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"k8s-app\":\"node-local-dns\"}},\"spec\":{\"containers\":[{\"args\":[\"-localip\",\"169.254.20.10,10.72.0.10\",\"-conf\",\"/etc/Corefile\",\"-upstreamsvc\",\"kube-dns-upstream\",\"-kubednscm\",\"/etc/kube-dns\"],\"image\":\"gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1\",\"livenessProbe\":{\"httpGet\":{\"host\":\"169.254.20.10\",\"path\":\"/health\",\"port\":8080},\"initialDelaySeconds\":60,\"timeoutSeconds\":5},\"name\":\"node-cache\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"},{\"containerPort\":9253,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"25m\",\"memory\":\"5Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/etc/coredns\",\"name\":\"config-volume\"},{\"mountPath\":\"/etc/kube-dns\",\"name\":\"kube-dns-config\"}]}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"addon.gke.io/node-local-dns-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"node-local-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"},{\"configMap\":{\"items\":[{\"key\":\"Corefile\",\"path\":\"Corefile.base\"}],\"name\":\"node-local-dns\"},\"name\":\"config-volume\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"}}}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "node-local-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:host": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":9253,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/coredns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/kube-dns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:addon.gke.io/node-local-dns-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "53114241", - "uid": "5069e9ba-0784-41bf-9577-3757bcb3b6d6" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "node-local-dns" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "nodelocaldns", - "components.gke.io/component-version": "1.4.0", - "prometheus.io/port": "9253", - "prometheus.io/scrape": "true" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "node-local-dns" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-localip", - "169.254.20.10,10.72.0.10", - "-conf", - "/etc/Corefile", - "-upstreamsvc", - "kube-dns-upstream", - "-kubednscm", - "/etc/kube-dns" - ], - "image": "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "host": "169.254.20.10", - "path": "/health", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "node-cache", - "ports": [ - { - "containerPort": 53, - "hostPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "hostPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - }, - { - "containerPort": 9253, - "hostPort": 9253, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "25m", - "memory": "5Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/etc/coredns", - "name": "config-volume" - }, - { - "mountPath": "/etc/kube-dns", - "name": "kube-dns-config" - } - ] - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "addon.gke.io/node-local-dns-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "node-local-dns", - "serviceAccountName": "node-local-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "Corefile", - "path": "Corefile.base" - } - ], - "name": "node-local-dns" - }, - "name": "config-volume" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 2, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"nvidia-gpu-device-plugin\"},\"name\":\"nvidia-gpu-device-plugin\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"cloud.google.com/gke-accelerator\",\"operator\":\"Exists\"}]}]}}},\"containers\":[{\"command\":[\"/usr/bin/nvidia-gpu-device-plugin\",\"-logtostderr\",\"--enable-container-gpu-metrics\",\"--enable-health-monitoring\"],\"env\":[{\"name\":\"LD_LIBRARY_PATH\",\"value\":\"/usr/local/nvidia/lib64\"}],\"image\":\"gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317\",\"name\":\"nvidia-gpu-device-plugin\",\"ports\":[{\"containerPort\":2112,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/device-plugin\",\"name\":\"device-plugin\"},{\"mountPath\":\"/dev\",\"name\":\"dev\"},{\"mountPath\":\"/usr/local/nvidia\",\"name\":\"nvidia\"},{\"mountPath\":\"/var/lib/kubelet/pod-resources\",\"name\":\"pod-resources\"},{\"mountPath\":\"/proc\",\"name\":\"proc\"},{\"mountPath\":\"/etc/nvidia\",\"name\":\"nvidia-config\"}]}],\"priorityClassName\":\"system-node-critical\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/device-plugins\"},\"name\":\"device-plugin\"},{\"hostPath\":{\"path\":\"/dev\"},\"name\":\"dev\"},{\"hostPath\":{\"path\":\"/home/kubernetes/bin/nvidia\",\"type\":\"Directory\"},\"name\":\"nvidia\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/pod-resources\"},\"name\":\"pod-resources\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"proc\"},{\"hostPath\":{\"path\":\"/etc/nvidia\"},\"name\":\"nvidia-config\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:17Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "nvidia-gpu-device-plugin" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:nodeAffinity": { - ".": {}, - "f:requiredDuringSchedulingIgnoredDuringExecution": { - ".": {}, - "f:nodeSelectorTerms": {} - } - } - }, - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"LD_LIBRARY_PATH\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":2112,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/device-plugin\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/local/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet/pod-resources\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"dev\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"device-plugin\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"nvidia\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"pod-resources\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - "f:command": {}, - "f:image": {}, - "f:volumeMounts": { - "k:{\"mountPath\":\"/etc/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/proc\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:volumes": { - "k:{\"name\":\"nvidia-config\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"proc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "nvidia-gpu-device-plugin", - "namespace": "kube-system", - "resourceVersion": "25934477", - "uid": "14396a20-ecee-4671-aefe-2a5b9d2e0dde" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "spec": { - "affinity": { - "nodeAffinity": { - "requiredDuringSchedulingIgnoredDuringExecution": { - "nodeSelectorTerms": [ - { - "matchExpressions": [ - { - "key": "cloud.google.com/gke-accelerator", - "operator": "Exists" - } - ] - } - ] - } - } - }, - "containers": [ - { - "command": [ - "/usr/bin/nvidia-gpu-device-plugin", - "-logtostderr", - "--enable-container-gpu-metrics", - "--enable-health-monitoring" - ], - "env": [ - { - "name": "LD_LIBRARY_PATH", - "value": "/usr/local/nvidia/lib64" - } - ], - "image": "gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317", - "imagePullPolicy": "IfNotPresent", - "name": "nvidia-gpu-device-plugin", - "ports": [ - { - "containerPort": 2112, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "20Mi" - }, - "requests": { - "cpu": "50m", - "memory": "20Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/device-plugin", - "name": "device-plugin" - }, - { - "mountPath": "/dev", - "name": "dev" - }, - { - "mountPath": "/usr/local/nvidia", - "name": "nvidia" - }, - { - "mountPath": "/var/lib/kubelet/pod-resources", - "name": "pod-resources" - }, - { - "mountPath": "/proc", - "name": "proc" - }, - { - "mountPath": "/etc/nvidia", - "name": "nvidia-config" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/device-plugins", - "type": "" - }, - "name": "device-plugin" - }, - { - "hostPath": { - "path": "/dev", - "type": "" - }, - "name": "dev" - }, - { - "hostPath": { - "path": "/home/kubernetes/bin/nvidia", - "type": "Directory" - }, - "name": "nvidia" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/pod-resources", - "type": "" - }, - "name": "pod-resources" - }, - { - "hostPath": { - "path": "/proc", - "type": "" - }, - "name": "proc" - }, - { - "hostPath": { - "path": "/etc/nvidia", - "type": "" - }, - "name": "nvidia-config" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:02:45.009201226Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:02:48Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"6de798cc-d558-479a-8ef4-38363e434633\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.63\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:02:55Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-5naq", - "uid": "6de798cc-d558-479a-8ef4-38363e434633" - } - ], - "resourceVersion": "53108585", - "uid": "fdd66d80-d09d-4b43-a291-b3797c7a5864" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-5naq", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://50767376b8a42b7a390e84c5c451d1485b1a562873b915100dc605bbcc49c1c5", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:02:48Z" - } - } - } - ], - "hostIP": "10.132.0.63", - "phase": "Running", - "podIP": "10.132.0.63", - "podIPs": [ - { - "ip": "10.132.0.63" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:02:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:09:05.595580038Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:09:09Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"d288c56c-2a00-42fe-b2ea-b8761fec2a4e\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.193\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:09:16Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-abj3", - "uid": "d288c56c-2a00-42fe-b2ea-b8761fec2a4e" - } - ], - "resourceVersion": "53110982", - "uid": "0866b060-d7a6-40bc-9ed9-292fbce958e9" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-abj3", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b04121a3de085254493b48dbe1be551abd021877d1c098afbd19e6429df8f4ba", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:09:08Z" - } - } - } - ], - "hostIP": "10.132.15.193", - "phase": "Running", - "podIP": "10.132.15.193", - "podIPs": [ - { - "ip": "10.132.15.193" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:09:06Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:56:27.195784979Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:56:29Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"9aa58d78-0147-4564-9900-0409a6bec341\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.61\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:56:37Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-enr8", - "uid": "9aa58d78-0147-4564-9900-0409a6bec341" - } - ], - "resourceVersion": "53106105", - "uid": "b940e7b5-9e7f-4ac7-a3ee-6c6655c1e65a" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-enr8", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b9375aed4bc463ecfa5fcfb0cfb3b55d087416bfe0c3267c1395e8f93569d03c", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:56:29Z" - } - } - } - ], - "hostIP": "10.132.0.61", - "phase": "Running", - "podIP": "10.132.0.61", - "podIPs": [ - { - "ip": "10.132.0.61" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:56:28Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:59:41.285621877Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:59:44Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"c1ab3c15-9764-40f5-ba6b-82556dc98ea2\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.62\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:59:52Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-oq2w", - "uid": "c1ab3c15-9764-40f5-ba6b-82556dc98ea2" - } - ], - "resourceVersion": "53107378", - "uid": "19e52dea-6339-4ed7-8e32-3d39b242d133" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-oq2w", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://a0b27bef16953a38c48075124547583280bccf28d1d6cf54c3b3e754e2847c86", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:59:44Z" - } - } - } - ], - "hostIP": "10.132.0.62", - "phase": "Running", - "podIP": "10.132.0.62", - "podIPs": [ - { - "ip": "10.132.0.62" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:59:42Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:12:12.095932889Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:12:15Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"7042c0e8-8dc5-4d1d-8b36-92c692c31c76\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.194\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:12:22Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-rgdp", - "uid": "7042c0e8-8dc5-4d1d-8b36-92c692c31c76" - } - ], - "resourceVersion": "53112149", - "uid": "5248c280-7bde-4fe9-a74e-56ae25abb0d2" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-rgdp", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://fd91ae480585a78c59ef401dc852d58921e76693ecbd908d98e4b63da6c298ff", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:12:14Z" - } - } - } - ], - "hostIP": "10.132.15.194", - "phase": "Running", - "podIP": "10.132.15.194", - "podIPs": [ - { - "ip": "10.132.15.194" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:12:13Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:05:45.558688986Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:05:49Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"a58f61e7-9d9e-4266-90d4-16b9969cb373\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.192\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:05:56Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-x940", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-x940", - "uid": "a58f61e7-9d9e-4266-90d4-16b9969cb373" - } - ], - "resourceVersion": "53109692", - "uid": "71a05734-f741-4b7e-82fe-765c555b3607" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-x940", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://6abab671623159f7174321118f58600f8955267a139a72508e9a73631ef7920d", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:05:48Z" - } - } - } - ], - "hostIP": "10.132.15.192", - "phase": "Running", - "podIP": "10.132.15.192", - "podIPs": [ - { - "ip": "10.132.15.192" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:05:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:15:06.466708143Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:15:10Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"65f37105-dd71-428b-bf8b-0e82b88027f1\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.195\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:15:17Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-zzyg", - "uid": "65f37105-dd71-428b-bf8b-0e82b88027f1" - } - ], - "resourceVersion": "53113200", - "uid": "dac23622-ae54-4a1a-a6ca-3c020911966e" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-zzyg", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://ee309dad5cb7047fcbd7eb0401760ccb4bd986080ab11c860911e37b132a2a5c", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:15:09Z" - } - } - } - ], - "hostIP": "10.132.15.195", - "phase": "Running", - "podIP": "10.132.15.195", - "podIPs": [ - { - "ip": "10.132.15.195" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:15:07Z" - } - } - ], - "listInputKinds": null - } - ], - "remediation": "Remove privileged capabilities by setting the securityContext.privileged to false. If you must deploy a Pod as privileged, add other restriction to it, such as network policy, Seccomp etc and still remove all unnecessary capabilities. Use the exception mechanism to remove unnecessary notifocations.", - "description": "Potential attackers may gain access to privileged containers and inherit access to the host resources. Therefore, it is not recommended to deploy privileged containers unless it is absolutely necessary. This control identifies all the privileged Pods.", - "score": 69 - }, - { - "guid": "", - "attributes": { - "armoBuiltin": true - }, - "id": "C-0006", - "controlID": "C-0006", - "name": "Allowed hostPath", - "ruleReports": [ - { - "name": "alert-rw-hostpath", - "remediation": "", - "ruleStatus": { - "status": "success", - "message": "" - }, - "ruleResponses": [ - { - "alertMessage": "pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq has: kubeconfig as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:02:45.009201226Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:02:48Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"6de798cc-d558-479a-8ef4-38363e434633\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.63\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:02:55Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-5naq", - "uid": "6de798cc-d558-479a-8ef4-38363e434633" - } - ], - "resourceVersion": "53108585", - "uid": "fdd66d80-d09d-4b43-a291-b3797c7a5864" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-5naq", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://50767376b8a42b7a390e84c5c451d1485b1a562873b915100dc605bbcc49c1c5", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:02:48Z" - } - } - } - ], - "hostIP": "10.132.0.63", - "phase": "Running", - "podIP": "10.132.0.63", - "podIPs": [ - { - "ip": "10.132.0.63" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:02:46Z" - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: pdcsi-node-windows has: plugin-dir as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: pdcsi-node-windows has: kubelet-dir as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - } - ] - } - }, - { - "alertMessage": "pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3 has: kubeconfig as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:09:05.595580038Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:09:09Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"d288c56c-2a00-42fe-b2ea-b8761fec2a4e\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.193\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:09:16Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-abj3", - "uid": "d288c56c-2a00-42fe-b2ea-b8761fec2a4e" - } - ], - "resourceVersion": "53110982", - "uid": "0866b060-d7a6-40bc-9ed9-292fbce958e9" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-abj3", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b04121a3de085254493b48dbe1be551abd021877d1c098afbd19e6429df8f4ba", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:09:08Z" - } - } - } - ], - "hostIP": "10.132.15.193", - "phase": "Running", - "podIP": "10.132.15.193", - "podIPs": [ - { - "ip": "10.132.15.193" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:09:06Z" - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: pdcsi-node-windows has: registration-dir as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: pdcsi-node-windows has: csi-proxy-filesystem-pipe as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - } - ] - } - }, - { - "alertMessage": "pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8 has: kubeconfig as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:56:27.195784979Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:56:29Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"9aa58d78-0147-4564-9900-0409a6bec341\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.61\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:56:37Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-enr8", - "uid": "9aa58d78-0147-4564-9900-0409a6bec341" - } - ], - "resourceVersion": "53106105", - "uid": "b940e7b5-9e7f-4ac7-a3ee-6c6655c1e65a" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-enr8", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b9375aed4bc463ecfa5fcfb0cfb3b55d087416bfe0c3267c1395e8f93569d03c", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:56:29Z" - } - } - } - ], - "hostIP": "10.132.0.61", - "phase": "Running", - "podIP": "10.132.0.61", - "podIPs": [ - { - "ip": "10.132.0.61" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:56:28Z" - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: pdcsi-node-windows has: csi-proxy-volume-pipe as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: pdcsi-node-windows has: csi-proxy-disk-pipe as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - } - ] - } - }, - { - "alertMessage": "pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w has: kubeconfig as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:59:41.285621877Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:59:44Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"c1ab3c15-9764-40f5-ba6b-82556dc98ea2\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.62\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:59:52Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-oq2w", - "uid": "c1ab3c15-9764-40f5-ba6b-82556dc98ea2" - } - ], - "resourceVersion": "53107378", - "uid": "19e52dea-6339-4ed7-8e32-3d39b242d133" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-oq2w", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://a0b27bef16953a38c48075124547583280bccf28d1d6cf54c3b3e754e2847c86", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:59:44Z" - } - } - } - ], - "hostIP": "10.132.0.62", - "phase": "Running", - "podIP": "10.132.0.62", - "podIPs": [ - { - "ip": "10.132.0.62" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:59:42Z" - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: pdcsi-node has: sys as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: pdcsi-node has: udev-socket as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - } - ] - } - }, - { - "alertMessage": "pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp has: kubeconfig as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:12:12.095932889Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:12:15Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"7042c0e8-8dc5-4d1d-8b36-92c692c31c76\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.194\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:12:22Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-rgdp", - "uid": "7042c0e8-8dc5-4d1d-8b36-92c692c31c76" - } - ], - "resourceVersion": "53112149", - "uid": "5248c280-7bde-4fe9-a74e-56ae25abb0d2" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-rgdp", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://fd91ae480585a78c59ef401dc852d58921e76693ecbd908d98e4b63da6c298ff", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:12:14Z" - } - } - } - ], - "hostIP": "10.132.15.194", - "phase": "Running", - "podIP": "10.132.15.194", - "podIPs": [ - { - "ip": "10.132.15.194" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:12:13Z" - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: pdcsi-node has: udev-rules-lib as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: pdcsi-node has: udev-rules-etc as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - } - ] - } - }, - { - "alertMessage": "pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-x940 has: kubeconfig as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:05:45.558688986Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:05:49Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"a58f61e7-9d9e-4266-90d4-16b9969cb373\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.192\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:05:56Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-x940", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-x940", - "uid": "a58f61e7-9d9e-4266-90d4-16b9969cb373" - } - ], - "resourceVersion": "53109692", - "uid": "71a05734-f741-4b7e-82fe-765c555b3607" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-x940", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://6abab671623159f7174321118f58600f8955267a139a72508e9a73631ef7920d", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:05:48Z" - } - } - } - ], - "hostIP": "10.132.15.192", - "phase": "Running", - "podIP": "10.132.15.192", - "podIPs": [ - { - "ip": "10.132.15.192" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:05:46Z" - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: pdcsi-node has: device-dir as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: pdcsi-node has: plugin-dir as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - } - ] - } - }, - { - "alertMessage": "pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg has: kubeconfig as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:15:06.466708143Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:15:10Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"65f37105-dd71-428b-bf8b-0e82b88027f1\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.195\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:15:17Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-zzyg", - "uid": "65f37105-dd71-428b-bf8b-0e82b88027f1" - } - ], - "resourceVersion": "53113200", - "uid": "dac23622-ae54-4a1a-a6ca-3c020911966e" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-zzyg", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://ee309dad5cb7047fcbd7eb0401760ccb4bd986080ab11c860911e37b132a2a5c", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:15:09Z" - } - } - } - ], - "hostIP": "10.132.15.195", - "phase": "Running", - "podIP": "10.132.15.195", - "podIPs": [ - { - "ip": "10.132.15.195" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:15:07Z" - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: pdcsi-node has: kubelet-dir as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: pdcsi-node has: registration-dir as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - } - ] - } - }, - { - "alertMessage": "Deployment: ca-webhook has: docker-socket-volume as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-webhook\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-webhook\"}},\"template\":{\"metadata\":{\"annotations\":{\"certificate\":\"d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt\"},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-tlsCertFile=/etc/webhook/certs/tls.crt\",\"-tlsKeyFile=/etc/webhook/certs/tls.key\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_WEBHOOK_NAME\",\"value\":\"ca-webhook\"},{\"name\":\"CA_WEBHOOK_PORT\",\"value\":\"443\"},{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_LOGIN_SECRET_NAME\",\"value\":\"ca-login\"},{\"name\":\"CA_ORACLE_SERVER\",\"value\":\"http://ca-oracle:4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"http://ca-notification-server:8001\"},{\"name\":\"CA_OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-webhook-ubi:606\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-webhook\",\"ports\":[{\"containerPort\":443,\"name\":\"mutating-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"600Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"100Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/cazips\",\"name\":\"zip-download\"},{\"mountPath\":\"/etc/webhook/certs\",\"name\":\"ca-cluster-certificate\",\"readOnly\":true},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"emptyDir\":{},\"name\":\"zip-download\"},{\"name\":\"ca-cluster-certificate\",\"secret\":{\"secretName\":\"ca-cluster-certificate\"}},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:46Z", - "generation": 1, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:certificate": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-webhook\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_LOGIN_SECRET_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/cazips\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/webhook/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-cluster-certificate\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"zip-download\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:16Z" - } - ], - "name": "ca-webhook", - "namespace": "cyberarmor-system", - "resourceVersion": "60787072", - "uid": "c968fe90-8480-471f-bdf1-fa98447ce1d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-webhook" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "certificate": "d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt" - }, - "creationTimestamp": null, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-tlsCertFile=/etc/webhook/certs/tls.crt", - "-tlsKeyFile=/etc/webhook/certs/tls.key", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_WEBHOOK_NAME", - "value": "ca-webhook" - }, - { - "name": "CA_WEBHOOK_PORT", - "value": "443" - }, - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_LOGIN_SECRET_NAME", - "value": "ca-login" - }, - { - "name": "CA_ORACLE_SERVER", - "value": "http://ca-oracle:4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "http://ca-notification-server:8001" - }, - { - "name": "CA_OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-webhook-ubi:606", - "imagePullPolicy": "Always", - "name": "ca-webhook", - "ports": [ - { - "containerPort": 443, - "name": "mutating-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "600Mi" - }, - "requests": { - "cpu": "300m", - "memory": "100Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/cazips", - "name": "zip-download" - }, - { - "mountPath": "/etc/webhook/certs", - "name": "ca-cluster-certificate", - "readOnly": true - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "emptyDir": {}, - "name": "zip-download" - }, - { - "name": "ca-cluster-certificate", - "secret": { - "defaultMode": 420, - "secretName": "ca-cluster-certificate" - } - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:16Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:46Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "ReplicaSet \"ca-webhook-7dd8bbd798\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Deployment: ca-websocket has: docker-socket-volume as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-websocket\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-websocket\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_VULN_SCAN_SCHEDULE\",\"value\":\"@every 11h\"},{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\",\"value\":\"@every 12h\"},{\"name\":\"CA_DEBUG_SIGNER\",\"value\":null}],\"image\":\"quay.io/armosec/k8s-ca-websocket-ubi:406\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-websocket\",\"ports\":[{\"containerPort\":4002,\"name\":\"trigger-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:43Z", - "generation": 1, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-websocket\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_DEBUG_SIGNER\"}": { - ".": {}, - "f:name": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_VULN_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:14Z" - } - ], - "name": "ca-websocket", - "namespace": "cyberarmor-system", - "resourceVersion": "60787065", - "uid": "914f30e9-d858-4945-9314-cbd3422ebaab" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-websocket" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_VULN_SCAN_SCHEDULE", - "value": "@every 11h" - }, - { - "name": "CA_POSTURE_SCAN_SCHEDULE", - "value": "@every 12h" - }, - { - "name": "CA_DEBUG_SIGNER" - } - ], - "image": "quay.io/armosec/k8s-ca-websocket-ubi:406", - "imagePullPolicy": "Always", - "name": "ca-websocket", - "ports": [ - { - "containerPort": 4002, - "name": "trigger-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "1000Mi" - }, - "requests": { - "cpu": "300m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:14Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:43Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "ReplicaSet \"ca-websocket-857758846f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: kube-proxy has: varlog as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "6", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-proxy\"},\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-proxy\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-proxy\"}},\"spec\":{\"containers\":[{\"command\":[\"/bin/sh\",\"-c\",\"kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\\u003e\\u003e/var/log/kube-proxy.log 2\\u003e\\u00261\"],\"env\":[{\"name\":\"KUBERNETES_SERVICE_HOST\",\"value\":\"34.78.97.243\"}],\"image\":\"gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001\",\"name\":\"kube-proxy\",\"resources\":{\"requests\":{\"cpu\":\"100m\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/log\",\"name\":\"varlog\",\"readOnly\":false},{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/lib/modules\",\"name\":\"lib-modules\",\"readOnly\":true}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\",\"node.kubernetes.io/kube-proxy-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"kube-proxy\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/log\"},\"name\":\"varlog\"},{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"hostPath\":{\"path\":\"/lib/modules\"},\"name\":\"lib-modules\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "generation": 6, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-proxy" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBERNETES_SERVICE_HOST\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/kube-proxy-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - "f:command": {}, - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:44Z" - } - ], - "name": "kube-proxy", - "namespace": "kube-system", - "resourceVersion": "52161714", - "uid": "bb6f9ab0-e586-407b-95c0-773637c696e8" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-proxy" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-proxy" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "env": [ - { - "name": "KUBERNETES_SERVICE_HOST", - "value": "34.78.97.243" - } - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux", - "node.kubernetes.io/kube-proxy-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "kube-proxy", - "serviceAccountName": "kube-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 6 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: nvidia-gpu-device-plugin has: nvidia-config as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"nvidia-gpu-device-plugin\"},\"name\":\"nvidia-gpu-device-plugin\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"cloud.google.com/gke-accelerator\",\"operator\":\"Exists\"}]}]}}},\"containers\":[{\"command\":[\"/usr/bin/nvidia-gpu-device-plugin\",\"-logtostderr\",\"--enable-container-gpu-metrics\",\"--enable-health-monitoring\"],\"env\":[{\"name\":\"LD_LIBRARY_PATH\",\"value\":\"/usr/local/nvidia/lib64\"}],\"image\":\"gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317\",\"name\":\"nvidia-gpu-device-plugin\",\"ports\":[{\"containerPort\":2112,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/device-plugin\",\"name\":\"device-plugin\"},{\"mountPath\":\"/dev\",\"name\":\"dev\"},{\"mountPath\":\"/usr/local/nvidia\",\"name\":\"nvidia\"},{\"mountPath\":\"/var/lib/kubelet/pod-resources\",\"name\":\"pod-resources\"},{\"mountPath\":\"/proc\",\"name\":\"proc\"},{\"mountPath\":\"/etc/nvidia\",\"name\":\"nvidia-config\"}]}],\"priorityClassName\":\"system-node-critical\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/device-plugins\"},\"name\":\"device-plugin\"},{\"hostPath\":{\"path\":\"/dev\"},\"name\":\"dev\"},{\"hostPath\":{\"path\":\"/home/kubernetes/bin/nvidia\",\"type\":\"Directory\"},\"name\":\"nvidia\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/pod-resources\"},\"name\":\"pod-resources\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"proc\"},{\"hostPath\":{\"path\":\"/etc/nvidia\"},\"name\":\"nvidia-config\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:17Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "nvidia-gpu-device-plugin" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:nodeAffinity": { - ".": {}, - "f:requiredDuringSchedulingIgnoredDuringExecution": { - ".": {}, - "f:nodeSelectorTerms": {} - } - } - }, - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"LD_LIBRARY_PATH\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":2112,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/device-plugin\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/local/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet/pod-resources\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"dev\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"device-plugin\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"nvidia\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"pod-resources\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - "f:command": {}, - "f:image": {}, - "f:volumeMounts": { - "k:{\"mountPath\":\"/etc/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/proc\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:volumes": { - "k:{\"name\":\"nvidia-config\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"proc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "nvidia-gpu-device-plugin", - "namespace": "kube-system", - "resourceVersion": "25934477", - "uid": "14396a20-ecee-4671-aefe-2a5b9d2e0dde" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "spec": { - "affinity": { - "nodeAffinity": { - "requiredDuringSchedulingIgnoredDuringExecution": { - "nodeSelectorTerms": [ - { - "matchExpressions": [ - { - "key": "cloud.google.com/gke-accelerator", - "operator": "Exists" - } - ] - } - ] - } - } - }, - "containers": [ - { - "command": [ - "/usr/bin/nvidia-gpu-device-plugin", - "-logtostderr", - "--enable-container-gpu-metrics", - "--enable-health-monitoring" - ], - "env": [ - { - "name": "LD_LIBRARY_PATH", - "value": "/usr/local/nvidia/lib64" - } - ], - "image": "gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317", - "imagePullPolicy": "IfNotPresent", - "name": "nvidia-gpu-device-plugin", - "ports": [ - { - "containerPort": 2112, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "20Mi" - }, - "requests": { - "cpu": "50m", - "memory": "20Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/device-plugin", - "name": "device-plugin" - }, - { - "mountPath": "/dev", - "name": "dev" - }, - { - "mountPath": "/usr/local/nvidia", - "name": "nvidia" - }, - { - "mountPath": "/var/lib/kubelet/pod-resources", - "name": "pod-resources" - }, - { - "mountPath": "/proc", - "name": "proc" - }, - { - "mountPath": "/etc/nvidia", - "name": "nvidia-config" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/device-plugins", - "type": "" - }, - "name": "device-plugin" - }, - { - "hostPath": { - "path": "/dev", - "type": "" - }, - "name": "dev" - }, - { - "hostPath": { - "path": "/home/kubernetes/bin/nvidia", - "type": "Directory" - }, - "name": "nvidia" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/pod-resources", - "type": "" - }, - "name": "pod-resources" - }, - { - "hostPath": { - "path": "/proc", - "type": "" - }, - "name": "proc" - }, - { - "hostPath": { - "path": "/etc/nvidia", - "type": "" - }, - "name": "nvidia-config" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 2 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: node-local-dns has: xtables-lock as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"node-local-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"node-local-dns\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"nodelocaldns\",\"components.gke.io/component-version\":\"1.4.0\",\"prometheus.io/port\":\"9253\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"k8s-app\":\"node-local-dns\"}},\"spec\":{\"containers\":[{\"args\":[\"-localip\",\"169.254.20.10,10.72.0.10\",\"-conf\",\"/etc/Corefile\",\"-upstreamsvc\",\"kube-dns-upstream\",\"-kubednscm\",\"/etc/kube-dns\"],\"image\":\"gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1\",\"livenessProbe\":{\"httpGet\":{\"host\":\"169.254.20.10\",\"path\":\"/health\",\"port\":8080},\"initialDelaySeconds\":60,\"timeoutSeconds\":5},\"name\":\"node-cache\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"},{\"containerPort\":9253,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"25m\",\"memory\":\"5Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/etc/coredns\",\"name\":\"config-volume\"},{\"mountPath\":\"/etc/kube-dns\",\"name\":\"kube-dns-config\"}]}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"addon.gke.io/node-local-dns-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"node-local-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"},{\"configMap\":{\"items\":[{\"key\":\"Corefile\",\"path\":\"Corefile.base\"}],\"name\":\"node-local-dns\"},\"name\":\"config-volume\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"}}}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "node-local-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:host": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":9253,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/coredns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/kube-dns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:addon.gke.io/node-local-dns-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "53114241", - "uid": "5069e9ba-0784-41bf-9577-3757bcb3b6d6" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "node-local-dns" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "nodelocaldns", - "components.gke.io/component-version": "1.4.0", - "prometheus.io/port": "9253", - "prometheus.io/scrape": "true" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "node-local-dns" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-localip", - "169.254.20.10,10.72.0.10", - "-conf", - "/etc/Corefile", - "-upstreamsvc", - "kube-dns-upstream", - "-kubednscm", - "/etc/kube-dns" - ], - "image": "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "host": "169.254.20.10", - "path": "/health", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "node-cache", - "ports": [ - { - "containerPort": 53, - "hostPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "hostPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - }, - { - "containerPort": 9253, - "hostPort": 9253, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "25m", - "memory": "5Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/etc/coredns", - "name": "config-volume" - }, - { - "mountPath": "/etc/kube-dns", - "name": "kube-dns-config" - } - ] - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "addon.gke.io/node-local-dns-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "node-local-dns", - "serviceAccountName": "node-local-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "Corefile", - "path": "Corefile.base" - } - ], - "name": "node-local-dns" - }, - "name": "config-volume" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 2, - "updatedNumberScheduled": 7 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: nvidia-gpu-device-plugin has: device-plugin as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"nvidia-gpu-device-plugin\"},\"name\":\"nvidia-gpu-device-plugin\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"cloud.google.com/gke-accelerator\",\"operator\":\"Exists\"}]}]}}},\"containers\":[{\"command\":[\"/usr/bin/nvidia-gpu-device-plugin\",\"-logtostderr\",\"--enable-container-gpu-metrics\",\"--enable-health-monitoring\"],\"env\":[{\"name\":\"LD_LIBRARY_PATH\",\"value\":\"/usr/local/nvidia/lib64\"}],\"image\":\"gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317\",\"name\":\"nvidia-gpu-device-plugin\",\"ports\":[{\"containerPort\":2112,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/device-plugin\",\"name\":\"device-plugin\"},{\"mountPath\":\"/dev\",\"name\":\"dev\"},{\"mountPath\":\"/usr/local/nvidia\",\"name\":\"nvidia\"},{\"mountPath\":\"/var/lib/kubelet/pod-resources\",\"name\":\"pod-resources\"},{\"mountPath\":\"/proc\",\"name\":\"proc\"},{\"mountPath\":\"/etc/nvidia\",\"name\":\"nvidia-config\"}]}],\"priorityClassName\":\"system-node-critical\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/device-plugins\"},\"name\":\"device-plugin\"},{\"hostPath\":{\"path\":\"/dev\"},\"name\":\"dev\"},{\"hostPath\":{\"path\":\"/home/kubernetes/bin/nvidia\",\"type\":\"Directory\"},\"name\":\"nvidia\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/pod-resources\"},\"name\":\"pod-resources\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"proc\"},{\"hostPath\":{\"path\":\"/etc/nvidia\"},\"name\":\"nvidia-config\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:17Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "nvidia-gpu-device-plugin" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:nodeAffinity": { - ".": {}, - "f:requiredDuringSchedulingIgnoredDuringExecution": { - ".": {}, - "f:nodeSelectorTerms": {} - } - } - }, - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"LD_LIBRARY_PATH\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":2112,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/device-plugin\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/local/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet/pod-resources\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"dev\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"device-plugin\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"nvidia\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"pod-resources\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - "f:command": {}, - "f:image": {}, - "f:volumeMounts": { - "k:{\"mountPath\":\"/etc/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/proc\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:volumes": { - "k:{\"name\":\"nvidia-config\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"proc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "nvidia-gpu-device-plugin", - "namespace": "kube-system", - "resourceVersion": "25934477", - "uid": "14396a20-ecee-4671-aefe-2a5b9d2e0dde" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "spec": { - "affinity": { - "nodeAffinity": { - "requiredDuringSchedulingIgnoredDuringExecution": { - "nodeSelectorTerms": [ - { - "matchExpressions": [ - { - "key": "cloud.google.com/gke-accelerator", - "operator": "Exists" - } - ] - } - ] - } - } - }, - "containers": [ - { - "command": [ - "/usr/bin/nvidia-gpu-device-plugin", - "-logtostderr", - "--enable-container-gpu-metrics", - "--enable-health-monitoring" - ], - "env": [ - { - "name": "LD_LIBRARY_PATH", - "value": "/usr/local/nvidia/lib64" - } - ], - "image": "gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317", - "imagePullPolicy": "IfNotPresent", - "name": "nvidia-gpu-device-plugin", - "ports": [ - { - "containerPort": 2112, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "20Mi" - }, - "requests": { - "cpu": "50m", - "memory": "20Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/device-plugin", - "name": "device-plugin" - }, - { - "mountPath": "/dev", - "name": "dev" - }, - { - "mountPath": "/usr/local/nvidia", - "name": "nvidia" - }, - { - "mountPath": "/var/lib/kubelet/pod-resources", - "name": "pod-resources" - }, - { - "mountPath": "/proc", - "name": "proc" - }, - { - "mountPath": "/etc/nvidia", - "name": "nvidia-config" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/device-plugins", - "type": "" - }, - "name": "device-plugin" - }, - { - "hostPath": { - "path": "/dev", - "type": "" - }, - "name": "dev" - }, - { - "hostPath": { - "path": "/home/kubernetes/bin/nvidia", - "type": "Directory" - }, - "name": "nvidia" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/pod-resources", - "type": "" - }, - "name": "pod-resources" - }, - { - "hostPath": { - "path": "/proc", - "type": "" - }, - "name": "proc" - }, - { - "hostPath": { - "path": "/etc/nvidia", - "type": "" - }, - "name": "nvidia-config" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 2 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: nvidia-gpu-device-plugin has: proc as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"nvidia-gpu-device-plugin\"},\"name\":\"nvidia-gpu-device-plugin\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"cloud.google.com/gke-accelerator\",\"operator\":\"Exists\"}]}]}}},\"containers\":[{\"command\":[\"/usr/bin/nvidia-gpu-device-plugin\",\"-logtostderr\",\"--enable-container-gpu-metrics\",\"--enable-health-monitoring\"],\"env\":[{\"name\":\"LD_LIBRARY_PATH\",\"value\":\"/usr/local/nvidia/lib64\"}],\"image\":\"gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317\",\"name\":\"nvidia-gpu-device-plugin\",\"ports\":[{\"containerPort\":2112,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/device-plugin\",\"name\":\"device-plugin\"},{\"mountPath\":\"/dev\",\"name\":\"dev\"},{\"mountPath\":\"/usr/local/nvidia\",\"name\":\"nvidia\"},{\"mountPath\":\"/var/lib/kubelet/pod-resources\",\"name\":\"pod-resources\"},{\"mountPath\":\"/proc\",\"name\":\"proc\"},{\"mountPath\":\"/etc/nvidia\",\"name\":\"nvidia-config\"}]}],\"priorityClassName\":\"system-node-critical\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/device-plugins\"},\"name\":\"device-plugin\"},{\"hostPath\":{\"path\":\"/dev\"},\"name\":\"dev\"},{\"hostPath\":{\"path\":\"/home/kubernetes/bin/nvidia\",\"type\":\"Directory\"},\"name\":\"nvidia\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/pod-resources\"},\"name\":\"pod-resources\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"proc\"},{\"hostPath\":{\"path\":\"/etc/nvidia\"},\"name\":\"nvidia-config\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:17Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "nvidia-gpu-device-plugin" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:nodeAffinity": { - ".": {}, - "f:requiredDuringSchedulingIgnoredDuringExecution": { - ".": {}, - "f:nodeSelectorTerms": {} - } - } - }, - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"LD_LIBRARY_PATH\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":2112,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/device-plugin\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/local/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet/pod-resources\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"dev\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"device-plugin\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"nvidia\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"pod-resources\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - "f:command": {}, - "f:image": {}, - "f:volumeMounts": { - "k:{\"mountPath\":\"/etc/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/proc\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:volumes": { - "k:{\"name\":\"nvidia-config\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"proc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "nvidia-gpu-device-plugin", - "namespace": "kube-system", - "resourceVersion": "25934477", - "uid": "14396a20-ecee-4671-aefe-2a5b9d2e0dde" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "spec": { - "affinity": { - "nodeAffinity": { - "requiredDuringSchedulingIgnoredDuringExecution": { - "nodeSelectorTerms": [ - { - "matchExpressions": [ - { - "key": "cloud.google.com/gke-accelerator", - "operator": "Exists" - } - ] - } - ] - } - } - }, - "containers": [ - { - "command": [ - "/usr/bin/nvidia-gpu-device-plugin", - "-logtostderr", - "--enable-container-gpu-metrics", - "--enable-health-monitoring" - ], - "env": [ - { - "name": "LD_LIBRARY_PATH", - "value": "/usr/local/nvidia/lib64" - } - ], - "image": "gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317", - "imagePullPolicy": "IfNotPresent", - "name": "nvidia-gpu-device-plugin", - "ports": [ - { - "containerPort": 2112, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "20Mi" - }, - "requests": { - "cpu": "50m", - "memory": "20Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/device-plugin", - "name": "device-plugin" - }, - { - "mountPath": "/dev", - "name": "dev" - }, - { - "mountPath": "/usr/local/nvidia", - "name": "nvidia" - }, - { - "mountPath": "/var/lib/kubelet/pod-resources", - "name": "pod-resources" - }, - { - "mountPath": "/proc", - "name": "proc" - }, - { - "mountPath": "/etc/nvidia", - "name": "nvidia-config" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/device-plugins", - "type": "" - }, - "name": "device-plugin" - }, - { - "hostPath": { - "path": "/dev", - "type": "" - }, - "name": "dev" - }, - { - "hostPath": { - "path": "/home/kubernetes/bin/nvidia", - "type": "Directory" - }, - "name": "nvidia" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/pod-resources", - "type": "" - }, - "name": "pod-resources" - }, - { - "hostPath": { - "path": "/proc", - "type": "" - }, - "name": "proc" - }, - { - "hostPath": { - "path": "/etc/nvidia", - "type": "" - }, - "name": "nvidia-config" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 2 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: nvidia-gpu-device-plugin has: pod-resources as hostPath volume", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"nvidia-gpu-device-plugin\"},\"name\":\"nvidia-gpu-device-plugin\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"cloud.google.com/gke-accelerator\",\"operator\":\"Exists\"}]}]}}},\"containers\":[{\"command\":[\"/usr/bin/nvidia-gpu-device-plugin\",\"-logtostderr\",\"--enable-container-gpu-metrics\",\"--enable-health-monitoring\"],\"env\":[{\"name\":\"LD_LIBRARY_PATH\",\"value\":\"/usr/local/nvidia/lib64\"}],\"image\":\"gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317\",\"name\":\"nvidia-gpu-device-plugin\",\"ports\":[{\"containerPort\":2112,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/device-plugin\",\"name\":\"device-plugin\"},{\"mountPath\":\"/dev\",\"name\":\"dev\"},{\"mountPath\":\"/usr/local/nvidia\",\"name\":\"nvidia\"},{\"mountPath\":\"/var/lib/kubelet/pod-resources\",\"name\":\"pod-resources\"},{\"mountPath\":\"/proc\",\"name\":\"proc\"},{\"mountPath\":\"/etc/nvidia\",\"name\":\"nvidia-config\"}]}],\"priorityClassName\":\"system-node-critical\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/device-plugins\"},\"name\":\"device-plugin\"},{\"hostPath\":{\"path\":\"/dev\"},\"name\":\"dev\"},{\"hostPath\":{\"path\":\"/home/kubernetes/bin/nvidia\",\"type\":\"Directory\"},\"name\":\"nvidia\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/pod-resources\"},\"name\":\"pod-resources\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"proc\"},{\"hostPath\":{\"path\":\"/etc/nvidia\"},\"name\":\"nvidia-config\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:17Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "nvidia-gpu-device-plugin" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:nodeAffinity": { - ".": {}, - "f:requiredDuringSchedulingIgnoredDuringExecution": { - ".": {}, - "f:nodeSelectorTerms": {} - } - } - }, - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"LD_LIBRARY_PATH\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":2112,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/device-plugin\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/local/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet/pod-resources\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"dev\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"device-plugin\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"nvidia\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"pod-resources\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - "f:command": {}, - "f:image": {}, - "f:volumeMounts": { - "k:{\"mountPath\":\"/etc/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/proc\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:volumes": { - "k:{\"name\":\"nvidia-config\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"proc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "nvidia-gpu-device-plugin", - "namespace": "kube-system", - "resourceVersion": "25934477", - "uid": "14396a20-ecee-4671-aefe-2a5b9d2e0dde" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "spec": { - "affinity": { - "nodeAffinity": { - "requiredDuringSchedulingIgnoredDuringExecution": { - "nodeSelectorTerms": [ - { - "matchExpressions": [ - { - "key": "cloud.google.com/gke-accelerator", - "operator": "Exists" - } - ] - } - ] - } - } - }, - "containers": [ - { - "command": [ - "/usr/bin/nvidia-gpu-device-plugin", - "-logtostderr", - "--enable-container-gpu-metrics", - "--enable-health-monitoring" - ], - "env": [ - { - "name": "LD_LIBRARY_PATH", - "value": "/usr/local/nvidia/lib64" - } - ], - "image": "gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317", - "imagePullPolicy": "IfNotPresent", - "name": "nvidia-gpu-device-plugin", - "ports": [ - { - "containerPort": 2112, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "20Mi" - }, - "requests": { - "cpu": "50m", - "memory": "20Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/device-plugin", - "name": "device-plugin" - }, - { - "mountPath": "/dev", - "name": "dev" - }, - { - "mountPath": "/usr/local/nvidia", - "name": "nvidia" - }, - { - "mountPath": "/var/lib/kubelet/pod-resources", - "name": "pod-resources" - }, - { - "mountPath": "/proc", - "name": "proc" - }, - { - "mountPath": "/etc/nvidia", - "name": "nvidia-config" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/device-plugins", - "type": "" - }, - "name": "device-plugin" - }, - { - "hostPath": { - "path": "/dev", - "type": "" - }, - "name": "dev" - }, - { - "hostPath": { - "path": "/home/kubernetes/bin/nvidia", - "type": "Directory" - }, - "name": "nvidia" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/pod-resources", - "type": "" - }, - "name": "pod-resources" - }, - { - "hostPath": { - "path": "/proc", - "type": "" - }, - "name": "proc" - }, - { - "hostPath": { - "path": "/etc/nvidia", - "type": "" - }, - "name": "nvidia-config" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 2 - } - } - ] - } - } - ], - "listInputResources": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-audit\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-audit\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CONFIG_FILES\",\"value\":\"/config/config.json\"},{\"name\":\"CA_SERVER_TYPE\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"cluster_kind\",\"name\":\"ca-audit\"}}}],\"image\":\"quay.io/armosec/k8s-ca-auditlog-ubi:21\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-audit\",\"ports\":[{\"containerPort\":443,\"name\":\"ca-audit-port\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/config\",\"name\":\"ca-audit\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-audit\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"config\",\"path\":\"config.json\"}],\"name\":\"ca-audit\"},\"name\":\"ca-audit\"},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:54Z", - "generation": 1, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CONFIG_FILES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_SERVER_TYPE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:54Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-audit", - "namespace": "cyberarmor-system", - "resourceVersion": "60787209", - "uid": "687f52ea-6956-4e8a-bb8c-7ea35a04b3f0" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-audit" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CONFIG_FILES", - "value": "/config/config.json" - }, - { - "name": "CA_SERVER_TYPE", - "valueFrom": { - "configMapKeyRef": { - "key": "cluster_kind", - "name": "ca-audit" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-auditlog-ubi:21", - "imagePullPolicy": "Always", - "name": "ca-audit", - "ports": [ - { - "containerPort": 443, - "name": "ca-audit-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/config", - "name": "ca-audit", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-audit", - "serviceAccountName": "ca-audit", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "config", - "path": "config.json" - } - ], - "name": "ca-audit" - }, - "name": "ca-audit" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:54Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-audit-c667df747\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-dashboard-aggregator\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-dashboard-aggregator\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-configtype=1\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-dashboard-aggregator\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"40Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:55Z", - "generation": 1, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-dashboard-aggregator\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:55Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T23:55:20Z" - } - ], - "name": "ca-dashboard-aggregator", - "namespace": "cyberarmor-system", - "resourceVersion": "61250607", - "uid": "0ba23569-e254-4388-b22f-30cc1eca031b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-dashboard-aggregator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-configtype=1", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173", - "imagePullPolicy": "Always", - "name": "ca-dashboard-aggregator", - "resources": { - "limits": { - "cpu": "200m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "40Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:18:55Z", - "lastUpdateTime": "2021-10-12T00:19:19Z", - "message": "ReplicaSet \"ca-dashboard-aggregator-5b8bdbc8f5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-12T23:55:20Z", - "lastUpdateTime": "2021-10-12T23:55:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-notification-server\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-notification-server\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"maserNotificationServer\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\",\"value\":\"customerGUID\"},{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\",\"value\":\"8001\"},{\"name\":\"CA_NOTIFICATION_SERVER_PORT\",\"value\":\"8002\"}],\"image\":\"quay.io/armosec/notification-server-ubi:89\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-notification-server\",\"ports\":[{\"containerPort\":8001,\"name\":\"websocket\"},{\"containerPort\":8002,\"name\":\"rest-api\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:59Z", - "generation": 1, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-notification-server\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8001,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:59Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:11Z" - } - ], - "name": "ca-notification-server", - "namespace": "cyberarmor-system", - "resourceVersion": "60787036", - "uid": "8c3dc6fe-e730-4364-8445-dc5a05ad2b0f" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-notification-server" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_HOST", - "valueFrom": { - "configMapKeyRef": { - "key": "maserNotificationServer", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_ATTRIBUTES", - "value": "customerGUID" - }, - { - "name": "CA_NOTIFICATION_SERVER_WS_PORT", - "value": "8001" - }, - { - "name": "CA_NOTIFICATION_SERVER_PORT", - "value": "8002" - } - ], - "image": "quay.io/armosec/notification-server-ubi:89", - "imagePullPolicy": "Always", - "name": "ca-notification-server", - "ports": [ - { - "containerPort": 8001, - "name": "websocket", - "protocol": "TCP" - }, - { - "containerPort": 8002, - "name": "rest-api", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "50Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:11Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:59Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "ReplicaSet \"ca-notification-server-6fd966c875\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-ocimage\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-ocimage\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-ocimage:63\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-ocimage\",\"ports\":[{\"containerPort\":8080,\"name\":\"ca-ocimage-port\"}],\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:51Z", - "generation": 1, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-ocimage\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:04Z" - } - ], - "name": "ca-ocimage", - "namespace": "cyberarmor-system", - "resourceVersion": "60786986", - "uid": "a6d37edf-b144-4677-91b3-73c73d9c7df6" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-ocimage" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-ocimage:63", - "imagePullPolicy": "Always", - "name": "ca-ocimage", - "ports": [ - { - "containerPort": 8080, - "name": "ca-ocimage-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "1", - "memory": "1000Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:04Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:51Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "ReplicaSet \"ca-ocimage-5576ff7d7d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-oracle\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-oracle\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_ORACLE_PORT\",\"value\":\"4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8002\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-oracle-ubi:11\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-oracle\",\"ports\":[{\"containerPort\":4000,\"name\":\"ca-oracle\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:19:01Z", - "generation": 1, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-oracle\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:19:01Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-oracle", - "namespace": "cyberarmor-system", - "resourceVersion": "60787203", - "uid": "da3dd21c-bf13-4d2a-97da-ca80b94d08d3" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-oracle" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_ORACLE_PORT", - "value": "4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8002" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-oracle-ubi:11", - "imagePullPolicy": "Always", - "name": "ca-oracle", - "ports": [ - { - "containerPort": 4000, - "name": "ca-oracle", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:19:01Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-oracle-6c98c6bdbf\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-posture\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-posture\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8001\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-posture-ubi:112\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-posture\",\"ports\":[{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/resources/config\",\"name\":\"ca-posture-score-config\",\"readOnly\":false},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"},{\"configMap\":{\"items\":[{\"key\":\"resourcesdict.json\",\"path\":\"resourcesdict.json\"},{\"key\":\"frameworkdict.json\",\"path\":\"frameworkdict.json\"}],\"name\":\"ca-posture-score-config\"},\"name\":\"ca-posture-score-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:58Z", - "generation": 1, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-posture\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/resources/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-posture-score-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:58Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:45Z" - } - ], - "name": "ca-posture", - "namespace": "cyberarmor-system", - "resourceVersion": "60787259", - "uid": "f41f4dc1-cfb0-4201-bca7-f1cf0b72b6b7" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-posture" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8001" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-posture-ubi:112", - "imagePullPolicy": "Always", - "name": "ca-posture", - "ports": [ - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "500m", - "memory": "100Mi" - }, - "requests": { - "cpu": "100m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/resources/config", - "name": "ca-posture-score-config" - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "resourcesdict.json", - "path": "resourcesdict.json" - }, - { - "key": "frameworkdict.json", - "path": "frameworkdict.json" - } - ], - "name": "ca-posture-score-config" - }, - "name": "ca-posture-score-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:45Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:58Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "ReplicaSet \"ca-posture-5996968d7b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-rbac\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-rbac\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"S3_BUCKET\",\"value\":\"ca-kubernetes-rbac-db-dev\"},{\"name\":\"AWS_REGION\",\"value\":\"eu-west-1\"},{\"name\":\"AWS_ACCESS_KEY_ID\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keyid\",\"name\":\"ca-rbac\"}}},{\"name\":\"AWS_SECRET_ACCESS_KEY\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keysecret\",\"name\":\"ca-rbac\"}}}],\"image\":\"quay.io/armosec/k8s-ca-rbac-scanner-ubi:20\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-rbac\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"400Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:50Z", - "generation": 1, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-rbac\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AWS_ACCESS_KEY_ID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"AWS_REGION\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"AWS_SECRET_ACCESS_KEY\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"S3_BUCKET\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:13Z" - } - ], - "name": "ca-rbac", - "namespace": "cyberarmor-system", - "resourceVersion": "60787051", - "uid": "d5898a09-2489-4254-b210-0725ddb2427a" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-rbac" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "S3_BUCKET", - "value": "ca-kubernetes-rbac-db-dev" - }, - { - "name": "AWS_REGION", - "value": "eu-west-1" - }, - { - "name": "AWS_ACCESS_KEY_ID", - "valueFrom": { - "secretKeyRef": { - "key": "keyid", - "name": "ca-rbac" - } - } - }, - { - "name": "AWS_SECRET_ACCESS_KEY", - "valueFrom": { - "secretKeyRef": { - "key": "keysecret", - "name": "ca-rbac" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-rbac-scanner-ubi:20", - "imagePullPolicy": "Always", - "name": "ca-rbac", - "resources": { - "limits": { - "cpu": "200m", - "memory": "400Mi" - }, - "requests": { - "cpu": "10m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:13Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:50Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "ReplicaSet \"ca-rbac-75c8cfd6b4\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-vuln-scan\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-vuln-scan\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"EVENT_RECEIVER_URL\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\",\"value\":\"4\"}],\"image\":\"quay.io/armosec/k8s-ca-vuln-scan-ubi:84\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-vuln-scan\",\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1.5Gi\"},\"requests\":{\"cpu\":\"500m\",\"memory\":\"1Gi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:47Z", - "generation": 1, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-vuln-scan\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EVENT_RECEIVER_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:00Z" - } - ], - "name": "ca-vuln-scan", - "namespace": "cyberarmor-system", - "resourceVersion": "60786938", - "uid": "9ea3d6cb-c6c0-423f-aab2-630827939285" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-vuln-scan" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "EVENT_RECEIVER_URL", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_MAX_VULN_SCAN_ROUTINS", - "value": "4" - } - ], - "image": "quay.io/armosec/k8s-ca-vuln-scan-ubi:84", - "imagePullPolicy": "Always", - "name": "ca-vuln-scan", - "resources": { - "limits": { - "cpu": "1", - "memory": "1536Mi" - }, - "requests": { - "cpu": "500m", - "memory": "1Gi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:00Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:47Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "ReplicaSet \"ca-vuln-scan-75b499df8c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-webhook\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-webhook\"}},\"template\":{\"metadata\":{\"annotations\":{\"certificate\":\"d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt\"},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-tlsCertFile=/etc/webhook/certs/tls.crt\",\"-tlsKeyFile=/etc/webhook/certs/tls.key\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_WEBHOOK_NAME\",\"value\":\"ca-webhook\"},{\"name\":\"CA_WEBHOOK_PORT\",\"value\":\"443\"},{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_LOGIN_SECRET_NAME\",\"value\":\"ca-login\"},{\"name\":\"CA_ORACLE_SERVER\",\"value\":\"http://ca-oracle:4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"http://ca-notification-server:8001\"},{\"name\":\"CA_OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-webhook-ubi:606\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-webhook\",\"ports\":[{\"containerPort\":443,\"name\":\"mutating-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"600Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"100Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/cazips\",\"name\":\"zip-download\"},{\"mountPath\":\"/etc/webhook/certs\",\"name\":\"ca-cluster-certificate\",\"readOnly\":true},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"emptyDir\":{},\"name\":\"zip-download\"},{\"name\":\"ca-cluster-certificate\",\"secret\":{\"secretName\":\"ca-cluster-certificate\"}},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:46Z", - "generation": 1, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:certificate": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-webhook\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_LOGIN_SECRET_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/cazips\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/webhook/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-cluster-certificate\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"zip-download\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:16Z" - } - ], - "name": "ca-webhook", - "namespace": "cyberarmor-system", - "resourceVersion": "60787072", - "uid": "c968fe90-8480-471f-bdf1-fa98447ce1d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-webhook" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "certificate": "d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt" - }, - "creationTimestamp": null, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-tlsCertFile=/etc/webhook/certs/tls.crt", - "-tlsKeyFile=/etc/webhook/certs/tls.key", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_WEBHOOK_NAME", - "value": "ca-webhook" - }, - { - "name": "CA_WEBHOOK_PORT", - "value": "443" - }, - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_LOGIN_SECRET_NAME", - "value": "ca-login" - }, - { - "name": "CA_ORACLE_SERVER", - "value": "http://ca-oracle:4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "http://ca-notification-server:8001" - }, - { - "name": "CA_OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-webhook-ubi:606", - "imagePullPolicy": "Always", - "name": "ca-webhook", - "ports": [ - { - "containerPort": 443, - "name": "mutating-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "600Mi" - }, - "requests": { - "cpu": "300m", - "memory": "100Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/cazips", - "name": "zip-download" - }, - { - "mountPath": "/etc/webhook/certs", - "name": "ca-cluster-certificate", - "readOnly": true - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "emptyDir": {}, - "name": "zip-download" - }, - { - "name": "ca-cluster-certificate", - "secret": { - "defaultMode": 420, - "secretName": "ca-cluster-certificate" - } - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:16Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:46Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "ReplicaSet \"ca-webhook-7dd8bbd798\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-websocket\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-websocket\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_VULN_SCAN_SCHEDULE\",\"value\":\"@every 11h\"},{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\",\"value\":\"@every 12h\"},{\"name\":\"CA_DEBUG_SIGNER\",\"value\":null}],\"image\":\"quay.io/armosec/k8s-ca-websocket-ubi:406\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-websocket\",\"ports\":[{\"containerPort\":4002,\"name\":\"trigger-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:43Z", - "generation": 1, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-websocket\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_DEBUG_SIGNER\"}": { - ".": {}, - "f:name": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_VULN_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:14Z" - } - ], - "name": "ca-websocket", - "namespace": "cyberarmor-system", - "resourceVersion": "60787065", - "uid": "914f30e9-d858-4945-9314-cbd3422ebaab" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-websocket" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_VULN_SCAN_SCHEDULE", - "value": "@every 11h" - }, - { - "name": "CA_POSTURE_SCAN_SCHEDULE", - "value": "@every 12h" - }, - { - "name": "CA_DEBUG_SIGNER" - } - ], - "image": "quay.io/armosec/k8s-ca-websocket-ubi:406", - "imagePullPolicy": "Always", - "name": "ca-websocket", - "ports": [ - { - "containerPort": 4002, - "name": "trigger-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "1000Mi" - }, - "requests": { - "cpu": "300m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:14Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:43Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "ReplicaSet \"ca-websocket-857758846f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"adservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"adservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"adservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/adservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"name\":\"server\",\"ports\":[{\"containerPort\":9555}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"180Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:51Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":9555,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:12Z" - } - ], - "name": "adservice", - "namespace": "hipster", - "resourceVersion": "61263240", - "uid": "368bea36-82be-4c28-8607-cf931a836185" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "adservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6415784d-d96b-4866-9c10-d571c8d8fd35", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:29", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-adservice" - }, - "creationTimestamp": null, - "labels": { - "app": "adservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/adservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 9555, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "300Mi" - }, - "requests": { - "cpu": "200m", - "memory": "180Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:24Z", - "lastUpdateTime": "2021-10-12T00:12:24Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:51Z", - "lastUpdateTime": "2021-10-13T00:28:12Z", - "message": "ReplicaSet \"adservice-7864446d5c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"cartservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"cartservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"cartservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"REDIS_ADDR\",\"value\":\"redis-cart:6379\"}],\"image\":\"gcr.io/google-samples/microservices-demo/cartservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15,\"periodSeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":7070}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:47Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"REDIS_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7070,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T09:40:08Z" - } - ], - "name": "cartservice", - "namespace": "hipster", - "resourceVersion": "61443544", - "uid": "df767287-ffc1-4559-b7fd-32b09bf6208c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "cartservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "7ced7c5c-c483-40b3-b6bc-8829339dc3e1", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:04", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-cartservice" - }, - "creationTimestamp": null, - "labels": { - "app": "cartservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "REDIS_ADDR", - "value": "redis-cart:6379" - } - ], - "image": "gcr.io/google-samples/microservices-demo/cartservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7070, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "128Mi" - }, - "requests": { - "cpu": "200m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-13T00:27:35Z", - "message": "ReplicaSet \"cartservice-7c8f8f9ddd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T09:40:08Z", - "lastUpdateTime": "2021-10-13T09:40:08Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"checkoutservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"checkoutservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"checkoutservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"5050\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"PAYMENT_SERVICE_ADDR\",\"value\":\"paymentservice:50051\"},{\"name\":\"EMAIL_SERVICE_ADDR\",\"value\":\"emailservice:5000\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"}],\"image\":\"gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":5050}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:42Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EMAIL_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PAYMENT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":5050,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:42Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:41Z" - } - ], - "name": "checkoutservice", - "namespace": "hipster", - "resourceVersion": "61262985", - "uid": "b5e6a8d8-1ec6-4acc-bf14-e3bb28bff284" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "checkoutservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "bebad8bb-8728-4813-ae19-d22a38a289a5", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:28", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-checkoutservice" - }, - "creationTimestamp": null, - "labels": { - "app": "checkoutservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "5050" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "PAYMENT_SERVICE_ADDR", - "value": "paymentservice:50051" - }, - { - "name": "EMAIL_SERVICE_ADDR", - "value": "emailservice:5000" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - } - ], - "image": "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 5050, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T14:05:32Z", - "lastUpdateTime": "2021-10-12T14:05:32Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:42Z", - "lastUpdateTime": "2021-10-13T00:27:42Z", - "message": "ReplicaSet \"checkoutservice-86c564466c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"currencyservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"currencyservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"currencyservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"7000\"}],\"image\":\"gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":7000,\"name\":\"grpc\"}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T08:37:54Z" - } - ], - "name": "currencyservice", - "namespace": "hipster", - "resourceVersion": "61423238", - "uid": "167b75e1-1be2-4764-aaad-dbb1ae248d3c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "currencyservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "4aa34494-0348-4859-9e29-56df9baf52ba", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-currencyservice" - }, - "creationTimestamp": null, - "labels": { - "app": "currencyservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "7000" - } - ], - "image": "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7000, - "name": "grpc", - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:29:19Z", - "message": "ReplicaSet \"currencyservice-544b6d849c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T08:37:54Z", - "lastUpdateTime": "2021-10-13T08:37:54Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"emailservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"emailservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"emailservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"DISABLE_PROFILER\",\"value\":\"1\"}],\"image\":\"gcr.io/google-samples/microservices-demo/emailservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:41Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"DISABLE_PROFILER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:41Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:07Z" - } - ], - "name": "emailservice", - "namespace": "hipster", - "resourceVersion": "61263204", - "uid": "9959433f-c964-4e6d-a2d7-3d1b9b617948" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "emailservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "e8aa9826-2367-44e1-9aad-a6d617b0fa06", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:48", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-emailservice" - }, - "creationTimestamp": null, - "labels": { - "app": "emailservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "DISABLE_PROFILER", - "value": "1" - } - ], - "image": "gcr.io/google-samples/microservices-demo/emailservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-12T00:11:47Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:41Z", - "lastUpdateTime": "2021-10-13T00:28:08Z", - "message": "ReplicaSet \"emailservice-cc7c4cd87\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"frontend\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"frontend\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"frontend\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"},{\"name\":\"RECOMMENDATION_SERVICE_ADDR\",\"value\":\"recommendationservice:8080\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"CHECKOUT_SERVICE_ADDR\",\"value\":\"checkoutservice:5050\"},{\"name\":\"AD_SERVICE_ADDR\",\"value\":\"adservice:9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/frontend:v0.2.3\",\"livenessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-liveness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-readiness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:44Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AD_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CHECKOUT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"RECOMMENDATION_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:44Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:34Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:22Z" - } - ], - "name": "frontend", - "namespace": "hipster", - "resourceVersion": "61263336", - "uid": "86b92d9e-22ad-4f0a-be26-41343f05f0d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "frontend" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9611f05f-4a8b-48ff-9722-e6a2ec702d65", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:57", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-frontend", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "frontend", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - }, - { - "name": "RECOMMENDATION_SERVICE_ADDR", - "value": "recommendationservice:8080" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "CHECKOUT_SERVICE_ADDR", - "value": "checkoutservice:5050" - }, - { - "name": "AD_SERVICE_ADDR", - "value": "adservice:9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/frontend:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-liveness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-readiness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:04Z", - "lastUpdateTime": "2021-10-12T00:12:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:44Z", - "lastUpdateTime": "2021-10-13T00:28:23Z", - "message": "ReplicaSet \"frontend-c747f6f47\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"loadgenerator\",\"namespace\":\"hipster\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"loadgenerator\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"loadgenerator\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"FRONTEND_ADDR\",\"value\":\"frontend:80\"},{\"name\":\"USERS\",\"value\":\"10\"}],\"image\":\"gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3\",\"name\":\"main\",\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"256Mi\"}}}],\"restartPolicy\":\"Always\",\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"main\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"FRONTEND_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"USERS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:38Z" - } - ], - "name": "loadgenerator", - "namespace": "hipster", - "resourceVersion": "61263451", - "uid": "e9200650-d25d-43f2-b1bc-4615beaed50c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "loadgenerator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "baca3d0f-fdc8-42c6-a9b1-ee29b3d173e0", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:26", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-loadgenerator", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "loadgenerator", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "FRONTEND_ADDR", - "value": "frontend:80" - }, - { - "name": "USERS", - "value": "10" - } - ], - "image": "gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "name": "main", - "resources": { - "limits": { - "cpu": "500m", - "memory": "512Mi" - }, - "requests": { - "cpu": "300m", - "memory": "256Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-13T00:24:15Z", - "lastUpdateTime": "2021-10-13T00:24:15Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:28:38Z", - "message": "ReplicaSet \"loadgenerator-6dcb6ffc4f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"paymentservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"paymentservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"paymentservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:45Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:45Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:29:27Z" - } - ], - "name": "paymentservice", - "namespace": "hipster", - "resourceVersion": "61263785", - "uid": "ab21c30f-d153-4ea8-982e-e12a71745dae" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "paymentservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "60b5720d-99b5-47a0-8bc4-656b372a6d17", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:52", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-paymentservice" - }, - "creationTimestamp": null, - "labels": { - "app": "paymentservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:45Z", - "lastUpdateTime": "2021-10-13T00:29:27Z", - "message": "ReplicaSet \"paymentservice-849b876ffd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"productcatalogservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"productcatalogservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"productcatalogservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":3550}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:46Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":3550,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:57Z" - } - ], - "name": "productcatalogservice", - "namespace": "hipster", - "resourceVersion": "61263117", - "uid": "50b29b6e-0f97-43b8-9555-a53d9c0e18f9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "productcatalogservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9bb4cc06-3907-401b-919f-c2974a623068", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-productcatalogservice" - }, - "creationTimestamp": null, - "labels": { - "app": "productcatalogservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 3550, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:46Z", - "lastUpdateTime": "2021-10-13T00:27:57Z", - "message": "ReplicaSet \"productcatalogservice-586fd876d5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"recommendationservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"recommendationservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"recommendationservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"450Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"220Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:43Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:37Z" - } - ], - "name": "recommendationservice", - "namespace": "hipster", - "resourceVersion": "61263443", - "uid": "00437f28-24c4-4759-ab93-f0be948eabc9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "recommendationservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "8cace306-b3ce-4f2f-8a6f-b122873b4eee", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-recommendationservice" - }, - "creationTimestamp": null, - "labels": { - "app": "recommendationservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "450Mi" - }, - "requests": { - "cpu": "100m", - "memory": "220Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-12T00:11:50Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:43Z", - "lastUpdateTime": "2021-10-13T00:28:37Z", - "message": "ReplicaSet \"recommendationservice-54b7b7b95d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"redis-cart\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"redis-cart\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"redis-cart\"}},\"spec\":{\"containers\":[{\"image\":\"redis:alpine\",\"livenessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"name\":\"redis\",\"ports\":[{\"containerPort\":6379}],\"readinessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"resources\":{\"limits\":{\"cpu\":\"125m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"70m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/data\",\"name\":\"redis-data\"}]}],\"volumes\":[{\"emptyDir\":{},\"name\":\"redis-data\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:50Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"redis\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":6379,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/data\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"redis-data\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:38Z" - } - ], - "name": "redis-cart", - "namespace": "hipster", - "resourceVersion": "61262948", - "uid": "76b3aebb-9ec5-479e-81ae-975ccf1bc6ec" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "redis-cart" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "838a7c21-618b-4693-a13b-838a9231ca58", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-redis-cart" - }, - "creationTimestamp": null, - "labels": { - "app": "redis-cart", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "image": "redis:alpine", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "name": "redis", - "ports": [ - { - "containerPort": 6379, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "125m", - "memory": "256Mi" - }, - "requests": { - "cpu": "70m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/data", - "name": "redis-data" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "emptyDir": {}, - "name": "redis-data" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:57Z", - "lastUpdateTime": "2021-10-12T00:11:57Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-13T00:27:38Z", - "message": "ReplicaSet \"redis-cart-594778c8b9\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"shippingservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"shippingservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"shippingservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:49Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:49Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:11Z" - } - ], - "name": "shippingservice", - "namespace": "hipster", - "resourceVersion": "61262726", - "uid": "febd2fe5-0e28-448e-aabd-31904ebb82a9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "shippingservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6503b850-839c-4b73-95ab-195d27b3c10d", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:26:58", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-shippingservice" - }, - "creationTimestamp": null, - "labels": { - "app": "shippingservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:00Z", - "lastUpdateTime": "2021-10-12T00:12:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:49Z", - "lastUpdateTime": "2021-10-13T00:27:11Z", - "message": "ReplicaSet \"shippingservice-758c9b4d4b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":\"10%\",\"maxUnavailable\":0}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"kubedns\",\"prometheus.io/port\":\"10054\",\"prometheus.io/scrape\":\"true\",\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"labels\":{\"k8s-app\":\"kube-dns\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchExpressions\":[{\"key\":\"k8s-app\",\"operator\":\"In\",\"values\":[\"kube-dns\"]}]},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"--domain=cluster.local.\",\"--dns-port=10053\",\"--config-dir=/kube-dns-config\",\"--v=2\"],\"env\":[{\"name\":\"PROMETHEUS_PORT\",\"value\":\"10055\"}],\"image\":\"gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/kubedns\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"kubedns\",\"ports\":[{\"containerPort\":10053,\"name\":\"dns-local\",\"protocol\":\"UDP\"},{\"containerPort\":10053,\"name\":\"dns-tcp-local\",\"protocol\":\"TCP\"},{\"containerPort\":10055,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readiness\",\"port\":8081,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":3,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"memory\":\"210Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"70Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001},\"volumeMounts\":[{\"mountPath\":\"/kube-dns-config\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"-v=2\",\"-logtostderr\",\"-configDir=/etc/k8s/dns/dnsmasq-nanny\",\"-restartDnsmasq=true\",\"--\",\"-k\",\"--cache-size=1000\",\"--no-negcache\",\"--dns-forward-max=1500\",\"--log-facility=-\",\"--server=/cluster.local/127.0.0.1#10053\",\"--server=/in-addr.arpa/127.0.0.1#10053\",\"--server=/ip6.arpa/127.0.0.1#10053\"],\"image\":\"gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/dnsmasq\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"dnsmasq\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"150m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"capabilities\":{\"add\":[\"NET_BIND_SERVICE\",\"SETGID\"],\"drop\":[\"all\"]}},\"volumeMounts\":[{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"--v=2\",\"--logtostderr\",\"--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV\",\"--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV\"],\"image\":\"gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/metrics\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"sidecar\",\"ports\":[{\"containerPort\":10054,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001}}],\"dnsPolicy\":\"Default\",\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 4, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:scheduler.alpha.kubernetes.io/critical-pod": {}, - "f:seccomp.security.alpha.kubernetes.io/pod": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:podAntiAffinity": { - ".": {}, - "f:preferredDuringSchedulingIgnoredDuringExecution": {} - } - }, - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:capabilities": { - ".": {}, - "f:add": {}, - "f:drop": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"kubedns\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PROMETHEUS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10053,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10053,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10055,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/kube-dns-config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"sidecar\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10054,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - "f:image": {} - }, - "k:{\"name\":\"kubedns\"}": { - "f:image": {} - }, - "k:{\"name\":\"sidecar\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:06:26Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "53109905", - "uid": "cd5cca24-7cd2-4548-a5d3-d90beb79f9e8" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 2, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "10%", - "maxUnavailable": 0 - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "kubedns", - "prometheus.io/port": "10054", - "prometheus.io/scrape": "true", - "scheduler.alpha.kubernetes.io/critical-pod": "", - "seccomp.security.alpha.kubernetes.io/pod": "runtime/default" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns" - } - }, - "spec": { - "affinity": { - "podAntiAffinity": { - "preferredDuringSchedulingIgnoredDuringExecution": [ - { - "podAffinityTerm": { - "labelSelector": { - "matchExpressions": [ - { - "key": "k8s-app", - "operator": "In", - "values": [ - "kube-dns" - ] - } - ] - }, - "topologyKey": "kubernetes.io/hostname" - }, - "weight": 100 - } - ] - } - }, - "containers": [ - { - "args": [ - "--domain=cluster.local.", - "--dns-port=10053", - "--config-dir=/kube-dns-config", - "--v=2" - ], - "env": [ - { - "name": "PROMETHEUS_PORT", - "value": "10055" - } - ], - "image": "gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/kubedns", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "kubedns", - "ports": [ - { - "containerPort": 10053, - "name": "dns-local", - "protocol": "UDP" - }, - { - "containerPort": 10053, - "name": "dns-tcp-local", - "protocol": "TCP" - }, - { - "containerPort": 10055, - "name": "metrics", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/readiness", - "port": 8081, - "scheme": "HTTP" - }, - "initialDelaySeconds": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "resources": { - "limits": { - "memory": "210Mi" - }, - "requests": { - "cpu": "100m", - "memory": "70Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/kube-dns-config", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "-v=2", - "-logtostderr", - "-configDir=/etc/k8s/dns/dnsmasq-nanny", - "-restartDnsmasq=true", - "--", - "-k", - "--cache-size=1000", - "--no-negcache", - "--dns-forward-max=1500", - "--log-facility=-", - "--server=/cluster.local/127.0.0.1#10053", - "--server=/in-addr.arpa/127.0.0.1#10053", - "--server=/ip6.arpa/127.0.0.1#10053" - ], - "image": "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/dnsmasq", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "dnsmasq", - "ports": [ - { - "containerPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "150m", - "memory": "20Mi" - } - }, - "securityContext": { - "capabilities": { - "add": [ - "NET_BIND_SERVICE", - "SETGID" - ], - "drop": [ - "all" - ] - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/k8s/dns/dnsmasq-nanny", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "--v=2", - "--logtostderr", - "--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV", - "--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV" - ], - "image": "gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/metrics", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "sidecar", - "ports": [ - { - "containerPort": 10054, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns", - "serviceAccountName": "kube-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 2, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-09-11T01:57:38Z", - "message": "ReplicaSet \"kube-dns-59844ff879\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:06:26Z", - "lastUpdateTime": "2021-09-25T17:06:26Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 4, - "readyReplicas": 2, - "replicas": 2, - "updatedReplicas": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns-autoscaler\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns-autoscaler\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"spec\":{\"containers\":[{\"command\":[\"/cluster-proportional-autoscaler\",\"--namespace=kube-system\",\"--configmap=kube-dns-autoscaler\",\"--target=Deployment/kube-dns\",\"--default-params={\\\"linear\\\":{\\\"coresPerReplica\\\":256,\\\"nodesPerReplica\\\":16,\\\"preventSinglePointFailure\\\":true,\\\"includeUnschedulableNodes\\\":true}}\",\"--logtostderr=true\",\"--v=2\"],\"image\":\"gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0\",\"name\":\"autoscaler\",\"resources\":{\"requests\":{\"cpu\":\"20m\",\"memory\":\"10Mi\"}}}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"seccompProfile\":{\"type\":\"RuntimeDefault\"},\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns-autoscaler\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns-autoscaler", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"autoscaler\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:02:52Z" - } - ], - "name": "kube-dns-autoscaler", - "namespace": "kube-system", - "resourceVersion": "53108562", - "uid": "c84ce079-f3c8-46ba-871f-0f2d42ffee1e" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/cluster-proportional-autoscaler", - "--namespace=kube-system", - "--configmap=kube-dns-autoscaler", - "--target=Deployment/kube-dns", - "--default-params={\"linear\":{\"coresPerReplica\":256,\"nodesPerReplica\":16,\"preventSinglePointFailure\":true,\"includeUnschedulableNodes\":true}}", - "--logtostderr=true", - "--v=2" - ], - "image": "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "autoscaler", - "resources": { - "requests": { - "cpu": "20m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "seccompProfile": { - "type": "RuntimeDefault" - }, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns-autoscaler", - "serviceAccountName": "kube-dns-autoscaler", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:54:39Z", - "message": "ReplicaSet \"kube-dns-autoscaler-844c9d9448\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:02:52Z", - "lastUpdateTime": "2021-09-25T17:02:52Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"glbc\",\"kubernetes.io/cluster-service\":\"true\",\"kubernetes.io/name\":\"GLBC\"},\"name\":\"l7-default-backend\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"glbc\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"glbc\",\"name\":\"glbc\"}},\"spec\":{\"containers\":[{\"image\":\"k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":30,\"timeoutSeconds\":5},\"name\":\"default-http-backend\",\"ports\":[{\"containerPort\":8080}],\"resources\":{\"limits\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}}}],\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"tolerations\":[{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "glbc", - "kubernetes.io/cluster-service": "true", - "kubernetes.io/name": "GLBC" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:kubernetes.io/name": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:name": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"default-http-backend\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:seccompProfile": { - "f:type": {} - } - }, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:01:20Z" - } - ], - "name": "l7-default-backend", - "namespace": "kube-system", - "resourceVersion": "53107969", - "uid": "32a76c03-37a1-44e9-b293-dd6b46ed274b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "glbc" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "glbc", - "name": "glbc" - } - }, - "spec": { - "containers": [ - { - "image": "k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 30, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "default-http-backend", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "10m", - "memory": "20Mi" - }, - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:56:25Z", - "message": "ReplicaSet \"l7-default-backend-56cb9644f6\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:01:20Z", - "lastUpdateTime": "2021-09-25T17:01:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "24", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metrics-server\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server-v0.3.6\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server\"},\"spec\":{\"containers\":[{\"command\":[\"/metrics-server\",\"--metric-resolution=30s\",\"--kubelet-port=10255\",\"--deprecated-kubelet-completely-insecure=true\",\"--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP\"],\"image\":\"k8s.gcr.io/metrics-server-amd64:v0.3.6\",\"name\":\"metrics-server\",\"ports\":[{\"containerPort\":443,\"name\":\"https\",\"protocol\":\"TCP\"}]},{\"command\":[\"/pod_nanny\",\"--config-dir=/etc/config\",\"--cpu=40m\",\"--extra-cpu=0.5m\",\"--memory=35Mi\",\"--extra-memory=4Mi\",\"--threshold=5\",\"--deployment=metrics-server-v0.3.6\",\"--container=metrics-server\",\"--poll-period=300000\",\"--estimator=exponential\",\"--scale-down-delay=24h\",\"--minClusterSize=5\",\"--use-metrics=true\"],\"env\":[{\"name\":\"MY_POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"MY_POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"gke.gcr.io/addon-resizer:1.8.11-gke.0\",\"name\":\"metrics-server-nanny\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"5m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"metrics-server-config-volume\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"metrics-server\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"metrics-server-config\"},\"name\":\"metrics-server-config-volume\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 24, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metrics-server", - "kubernetes.io/cluster-service": "true", - "version": "v0.3.6" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:version": {} - }, - "f:name": {} - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - }, - "k:{\"name\":\"metrics-server-nanny\"}": { - ".": {}, - "f:command": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"MY_POD_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"MY_POD_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"metrics-server-config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - "f:resources": { - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - } - } - } - } - } - } - }, - "manager": "pod_nanny", - "operation": "Update", - "time": "2021-06-13T13:42:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-26T17:13:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-26T17:13:52Z" - } - ], - "name": "metrics-server-v0.3.6", - "namespace": "kube-system", - "resourceVersion": "53582788", - "uid": "872d0f34-7998-45d3-9eea-570e0a47e03c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - }, - "name": "metrics-server" - }, - "spec": { - "containers": [ - { - "command": [ - "/metrics-server", - "--metric-resolution=30s", - "--kubelet-port=10255", - "--deprecated-kubelet-completely-insecure=true", - "--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP" - ], - "image": "k8s.gcr.io/metrics-server-amd64:v0.3.6", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server", - "ports": [ - { - "containerPort": 443, - "name": "https", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "44m", - "memory": "63Mi" - }, - "requests": { - "cpu": "44m", - "memory": "63Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - }, - { - "command": [ - "/pod_nanny", - "--config-dir=/etc/config", - "--cpu=40m", - "--extra-cpu=0.5m", - "--memory=35Mi", - "--extra-memory=4Mi", - "--threshold=5", - "--deployment=metrics-server-v0.3.6", - "--container=metrics-server", - "--poll-period=300000", - "--estimator=exponential", - "--scale-down-delay=24h", - "--minClusterSize=5", - "--use-metrics=true" - ], - "env": [ - { - "name": "MY_POD_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.name" - } - } - }, - { - "name": "MY_POD_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - } - ], - "image": "gke.gcr.io/addon-resizer:1.8.11-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server-nanny", - "resources": { - "limits": { - "cpu": "100m", - "memory": "300Mi" - }, - "requests": { - "cpu": "5m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "metrics-server-config-volume" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "serviceAccount": "metrics-server", - "serviceAccountName": "metrics-server", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "metrics-server-config" - }, - "name": "metrics-server-config-volume" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-09-25T17:12:33Z", - "lastUpdateTime": "2021-09-25T17:12:33Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-06-13T13:42:20Z", - "lastUpdateTime": "2021-09-26T17:13:52Z", - "message": "ReplicaSet \"metrics-server-v0.3.6-7889654bbb\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 24, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "6", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-proxy\"},\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-proxy\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-proxy\"}},\"spec\":{\"containers\":[{\"command\":[\"/bin/sh\",\"-c\",\"kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\\u003e\\u003e/var/log/kube-proxy.log 2\\u003e\\u00261\"],\"env\":[{\"name\":\"KUBERNETES_SERVICE_HOST\",\"value\":\"34.78.97.243\"}],\"image\":\"gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001\",\"name\":\"kube-proxy\",\"resources\":{\"requests\":{\"cpu\":\"100m\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/log\",\"name\":\"varlog\",\"readOnly\":false},{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/lib/modules\",\"name\":\"lib-modules\",\"readOnly\":true}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\",\"node.kubernetes.io/kube-proxy-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"kube-proxy\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/log\"},\"name\":\"varlog\"},{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"hostPath\":{\"path\":\"/lib/modules\"},\"name\":\"lib-modules\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "generation": 6, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-proxy" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBERNETES_SERVICE_HOST\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/kube-proxy-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - "f:command": {}, - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:44Z" - } - ], - "name": "kube-proxy", - "namespace": "kube-system", - "resourceVersion": "52161714", - "uid": "bb6f9ab0-e586-407b-95c0-773637c696e8" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-proxy" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-proxy" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "env": [ - { - "name": "KUBERNETES_SERVICE_HOST", - "value": "34.78.97.243" - } - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux", - "node.kubernetes.io/kube-proxy-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "kube-proxy", - "serviceAccountName": "kube-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 6 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"},\"name\":\"metadata-proxy-v0.1\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metadata-proxy\",\"version\":\"v0.1\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"}},\"spec\":{\"containers\":[{\"args\":[\"--addr=0.0.0.0:988\"],\"image\":\"k8s.gcr.io/metadata-proxy:v0.1.12\",\"name\":\"metadata-proxy\",\"resources\":{\"limits\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"},\"requests\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"}},\"securityContext\":{\"privileged\":true}}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"cloud.google.com/metadata-proxy-ready\":\"true\",\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"metadata-proxy\",\"terminationGracePeriodSeconds\":30,\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 3, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:cloud.google.com/metadata-proxy-ready": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - "f:args": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - } - ], - "name": "metadata-proxy-v0.1", - "namespace": "kube-system", - "resourceVersion": "25934435", - "uid": "94bf5845-f77b-47d4-bcec-e78549b4d8a3" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metadata-proxy", - "version": "v0.1" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--addr=0.0.0.0:988" - ], - "image": "k8s.gcr.io/metadata-proxy:v0.1.12", - "imagePullPolicy": "IfNotPresent", - "name": "metadata-proxy", - "resources": { - "limits": { - "cpu": "30m", - "memory": "25Mi" - }, - "requests": { - "cpu": "30m", - "memory": "25Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "cloud.google.com/metadata-proxy-ready": "true", - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "metadata-proxy", - "serviceAccountName": "metadata-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 3 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"node-local-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"node-local-dns\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"nodelocaldns\",\"components.gke.io/component-version\":\"1.4.0\",\"prometheus.io/port\":\"9253\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"k8s-app\":\"node-local-dns\"}},\"spec\":{\"containers\":[{\"args\":[\"-localip\",\"169.254.20.10,10.72.0.10\",\"-conf\",\"/etc/Corefile\",\"-upstreamsvc\",\"kube-dns-upstream\",\"-kubednscm\",\"/etc/kube-dns\"],\"image\":\"gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1\",\"livenessProbe\":{\"httpGet\":{\"host\":\"169.254.20.10\",\"path\":\"/health\",\"port\":8080},\"initialDelaySeconds\":60,\"timeoutSeconds\":5},\"name\":\"node-cache\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"},{\"containerPort\":9253,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"25m\",\"memory\":\"5Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/etc/coredns\",\"name\":\"config-volume\"},{\"mountPath\":\"/etc/kube-dns\",\"name\":\"kube-dns-config\"}]}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"addon.gke.io/node-local-dns-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"node-local-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"},{\"configMap\":{\"items\":[{\"key\":\"Corefile\",\"path\":\"Corefile.base\"}],\"name\":\"node-local-dns\"},\"name\":\"config-volume\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"}}}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "node-local-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:host": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":9253,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/coredns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/kube-dns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:addon.gke.io/node-local-dns-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "53114241", - "uid": "5069e9ba-0784-41bf-9577-3757bcb3b6d6" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "node-local-dns" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "nodelocaldns", - "components.gke.io/component-version": "1.4.0", - "prometheus.io/port": "9253", - "prometheus.io/scrape": "true" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "node-local-dns" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-localip", - "169.254.20.10,10.72.0.10", - "-conf", - "/etc/Corefile", - "-upstreamsvc", - "kube-dns-upstream", - "-kubednscm", - "/etc/kube-dns" - ], - "image": "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "host": "169.254.20.10", - "path": "/health", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "node-cache", - "ports": [ - { - "containerPort": 53, - "hostPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "hostPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - }, - { - "containerPort": 9253, - "hostPort": 9253, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "25m", - "memory": "5Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/etc/coredns", - "name": "config-volume" - }, - { - "mountPath": "/etc/kube-dns", - "name": "kube-dns-config" - } - ] - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "addon.gke.io/node-local-dns-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "node-local-dns", - "serviceAccountName": "node-local-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "Corefile", - "path": "Corefile.base" - } - ], - "name": "node-local-dns" - }, - "name": "config-volume" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 2, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"nvidia-gpu-device-plugin\"},\"name\":\"nvidia-gpu-device-plugin\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"cloud.google.com/gke-accelerator\",\"operator\":\"Exists\"}]}]}}},\"containers\":[{\"command\":[\"/usr/bin/nvidia-gpu-device-plugin\",\"-logtostderr\",\"--enable-container-gpu-metrics\",\"--enable-health-monitoring\"],\"env\":[{\"name\":\"LD_LIBRARY_PATH\",\"value\":\"/usr/local/nvidia/lib64\"}],\"image\":\"gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317\",\"name\":\"nvidia-gpu-device-plugin\",\"ports\":[{\"containerPort\":2112,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/device-plugin\",\"name\":\"device-plugin\"},{\"mountPath\":\"/dev\",\"name\":\"dev\"},{\"mountPath\":\"/usr/local/nvidia\",\"name\":\"nvidia\"},{\"mountPath\":\"/var/lib/kubelet/pod-resources\",\"name\":\"pod-resources\"},{\"mountPath\":\"/proc\",\"name\":\"proc\"},{\"mountPath\":\"/etc/nvidia\",\"name\":\"nvidia-config\"}]}],\"priorityClassName\":\"system-node-critical\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/device-plugins\"},\"name\":\"device-plugin\"},{\"hostPath\":{\"path\":\"/dev\"},\"name\":\"dev\"},{\"hostPath\":{\"path\":\"/home/kubernetes/bin/nvidia\",\"type\":\"Directory\"},\"name\":\"nvidia\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/pod-resources\"},\"name\":\"pod-resources\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"proc\"},{\"hostPath\":{\"path\":\"/etc/nvidia\"},\"name\":\"nvidia-config\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:17Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "nvidia-gpu-device-plugin" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:nodeAffinity": { - ".": {}, - "f:requiredDuringSchedulingIgnoredDuringExecution": { - ".": {}, - "f:nodeSelectorTerms": {} - } - } - }, - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"LD_LIBRARY_PATH\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":2112,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/device-plugin\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/local/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet/pod-resources\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"dev\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"device-plugin\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"nvidia\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"pod-resources\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - "f:command": {}, - "f:image": {}, - "f:volumeMounts": { - "k:{\"mountPath\":\"/etc/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/proc\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:volumes": { - "k:{\"name\":\"nvidia-config\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"proc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "nvidia-gpu-device-plugin", - "namespace": "kube-system", - "resourceVersion": "25934477", - "uid": "14396a20-ecee-4671-aefe-2a5b9d2e0dde" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "spec": { - "affinity": { - "nodeAffinity": { - "requiredDuringSchedulingIgnoredDuringExecution": { - "nodeSelectorTerms": [ - { - "matchExpressions": [ - { - "key": "cloud.google.com/gke-accelerator", - "operator": "Exists" - } - ] - } - ] - } - } - }, - "containers": [ - { - "command": [ - "/usr/bin/nvidia-gpu-device-plugin", - "-logtostderr", - "--enable-container-gpu-metrics", - "--enable-health-monitoring" - ], - "env": [ - { - "name": "LD_LIBRARY_PATH", - "value": "/usr/local/nvidia/lib64" - } - ], - "image": "gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317", - "imagePullPolicy": "IfNotPresent", - "name": "nvidia-gpu-device-plugin", - "ports": [ - { - "containerPort": 2112, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "20Mi" - }, - "requests": { - "cpu": "50m", - "memory": "20Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/device-plugin", - "name": "device-plugin" - }, - { - "mountPath": "/dev", - "name": "dev" - }, - { - "mountPath": "/usr/local/nvidia", - "name": "nvidia" - }, - { - "mountPath": "/var/lib/kubelet/pod-resources", - "name": "pod-resources" - }, - { - "mountPath": "/proc", - "name": "proc" - }, - { - "mountPath": "/etc/nvidia", - "name": "nvidia-config" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/device-plugins", - "type": "" - }, - "name": "device-plugin" - }, - { - "hostPath": { - "path": "/dev", - "type": "" - }, - "name": "dev" - }, - { - "hostPath": { - "path": "/home/kubernetes/bin/nvidia", - "type": "Directory" - }, - "name": "nvidia" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/pod-resources", - "type": "" - }, - "name": "pod-resources" - }, - { - "hostPath": { - "path": "/proc", - "type": "" - }, - "name": "proc" - }, - { - "hostPath": { - "path": "/etc/nvidia", - "type": "" - }, - "name": "nvidia-config" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:02:45.009201226Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:02:48Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"6de798cc-d558-479a-8ef4-38363e434633\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.63\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:02:55Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-5naq", - "uid": "6de798cc-d558-479a-8ef4-38363e434633" - } - ], - "resourceVersion": "53108585", - "uid": "fdd66d80-d09d-4b43-a291-b3797c7a5864" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-5naq", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://50767376b8a42b7a390e84c5c451d1485b1a562873b915100dc605bbcc49c1c5", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:02:48Z" - } - } - } - ], - "hostIP": "10.132.0.63", - "phase": "Running", - "podIP": "10.132.0.63", - "podIPs": [ - { - "ip": "10.132.0.63" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:02:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:09:05.595580038Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:09:09Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"d288c56c-2a00-42fe-b2ea-b8761fec2a4e\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.193\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:09:16Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-abj3", - "uid": "d288c56c-2a00-42fe-b2ea-b8761fec2a4e" - } - ], - "resourceVersion": "53110982", - "uid": "0866b060-d7a6-40bc-9ed9-292fbce958e9" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-abj3", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b04121a3de085254493b48dbe1be551abd021877d1c098afbd19e6429df8f4ba", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:09:08Z" - } - } - } - ], - "hostIP": "10.132.15.193", - "phase": "Running", - "podIP": "10.132.15.193", - "podIPs": [ - { - "ip": "10.132.15.193" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:09:06Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:56:27.195784979Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:56:29Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"9aa58d78-0147-4564-9900-0409a6bec341\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.61\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:56:37Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-enr8", - "uid": "9aa58d78-0147-4564-9900-0409a6bec341" - } - ], - "resourceVersion": "53106105", - "uid": "b940e7b5-9e7f-4ac7-a3ee-6c6655c1e65a" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-enr8", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b9375aed4bc463ecfa5fcfb0cfb3b55d087416bfe0c3267c1395e8f93569d03c", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:56:29Z" - } - } - } - ], - "hostIP": "10.132.0.61", - "phase": "Running", - "podIP": "10.132.0.61", - "podIPs": [ - { - "ip": "10.132.0.61" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:56:28Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:59:41.285621877Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:59:44Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"c1ab3c15-9764-40f5-ba6b-82556dc98ea2\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.62\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:59:52Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-oq2w", - "uid": "c1ab3c15-9764-40f5-ba6b-82556dc98ea2" - } - ], - "resourceVersion": "53107378", - "uid": "19e52dea-6339-4ed7-8e32-3d39b242d133" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-oq2w", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://a0b27bef16953a38c48075124547583280bccf28d1d6cf54c3b3e754e2847c86", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:59:44Z" - } - } - } - ], - "hostIP": "10.132.0.62", - "phase": "Running", - "podIP": "10.132.0.62", - "podIPs": [ - { - "ip": "10.132.0.62" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:59:42Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:12:12.095932889Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:12:15Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"7042c0e8-8dc5-4d1d-8b36-92c692c31c76\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.194\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:12:22Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-rgdp", - "uid": "7042c0e8-8dc5-4d1d-8b36-92c692c31c76" - } - ], - "resourceVersion": "53112149", - "uid": "5248c280-7bde-4fe9-a74e-56ae25abb0d2" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-rgdp", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://fd91ae480585a78c59ef401dc852d58921e76693ecbd908d98e4b63da6c298ff", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:12:14Z" - } - } - } - ], - "hostIP": "10.132.15.194", - "phase": "Running", - "podIP": "10.132.15.194", - "podIPs": [ - { - "ip": "10.132.15.194" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:12:13Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:05:45.558688986Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:05:49Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"a58f61e7-9d9e-4266-90d4-16b9969cb373\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.192\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:05:56Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-x940", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-x940", - "uid": "a58f61e7-9d9e-4266-90d4-16b9969cb373" - } - ], - "resourceVersion": "53109692", - "uid": "71a05734-f741-4b7e-82fe-765c555b3607" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-x940", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://6abab671623159f7174321118f58600f8955267a139a72508e9a73631ef7920d", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:05:48Z" - } - } - } - ], - "hostIP": "10.132.15.192", - "phase": "Running", - "podIP": "10.132.15.192", - "podIPs": [ - { - "ip": "10.132.15.192" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:05:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:15:06.466708143Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:15:10Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"65f37105-dd71-428b-bf8b-0e82b88027f1\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.195\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:15:17Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-zzyg", - "uid": "65f37105-dd71-428b-bf8b-0e82b88027f1" - } - ], - "resourceVersion": "53113200", - "uid": "dac23622-ae54-4a1a-a6ca-3c020911966e" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-zzyg", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://ee309dad5cb7047fcbd7eb0401760ccb4bd986080ab11c860911e37b132a2a5c", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:15:09Z" - } - } - } - ], - "hostIP": "10.132.15.195", - "phase": "Running", - "podIP": "10.132.15.195", - "podIPs": [ - { - "ip": "10.132.15.195" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:15:07Z" - } - } - ], - "listInputKinds": null - } - ], - "remediation": "Refrain from using host path mount.", - "description": "Mounting host directory to the container can be abused to get access to sensitive data and gain persistence on the host machine.", - "score": 25 - }, - { - "guid": "", - "attributes": { - "armoBuiltin": true - }, - "id": "C-0034", - "controlID": "C-0034", - "name": "Automatic mapping of service account", - "ruleReports": [ - { - "name": "automount-service-account", - "remediation": "", - "ruleStatus": { - "status": "success", - "message": "" - }, - "ruleResponses": [ - { - "alertMessage": "the following service account: ca-audit in the following namespace: cyberarmor-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-audit\",\"namespace\":\"cyberarmor-system\"}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:53Z", - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"ca-audit-token-gw966\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:18:53Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:53Z" - } - ], - "name": "ca-audit", - "namespace": "cyberarmor-system", - "resourceVersion": "60786837", - "uid": "3435abc3-f706-4e0e-b5cc-01782c878849" - }, - "secrets": [ - { - "name": "ca-audit-token-gw966" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: ca-controller-service-account in the following namespace: cyberarmor-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-controller-service-account\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-controller-service-account\",\"namespace\":\"cyberarmor-system\"}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:37Z", - "labels": { - "app": "ca-controller-service-account", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"ca-controller-service-account-token-4mnp7\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:18:37Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:37Z" - } - ], - "name": "ca-controller-service-account", - "namespace": "cyberarmor-system", - "resourceVersion": "60786654", - "uid": "e810c8cb-3a30-445f-94c4-d0767ed75e27" - }, - "secrets": [ - { - "name": "ca-controller-service-account-token-4mnp7" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: default in the following namespace: cyberarmor-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-10-12T00:18:35Z", - "name": "default", - "namespace": "cyberarmor-system", - "resourceVersion": "60786638", - "uid": "6575ea7f-3d9d-405c-a4c4-4fb769409b74" - }, - "secrets": [ - { - "name": "default-token-xppwm" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: default in the following namespace: default mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "name": "default", - "namespace": "default", - "resourceVersion": "283", - "uid": "8a4f2a56-f4a5-4f90-890a-9ee2537fbccc" - }, - "secrets": [ - { - "name": "default-token-7d4nv" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: default in the following namespace: hipster mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-07-27T19:59:29Z", - "name": "default", - "namespace": "hipster", - "resourceVersion": "24370772", - "uid": "434039dd-abc7-41a2-ad74-119d5e7ccb4e" - }, - "secrets": [ - { - "name": "default-token-j56bb" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: default in the following namespace: kube-node-lease mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "name": "default", - "namespace": "kube-node-lease", - "resourceVersion": "282", - "uid": "2e420c8a-9409-42b4-8834-8fc2de1515c5" - }, - "secrets": [ - { - "name": "default-token-2dqs6" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: default in the following namespace: kube-public mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "name": "default", - "namespace": "kube-public", - "resourceVersion": "279", - "uid": "7d5c649c-307b-4ada-b11a-22f4b2da2bd7" - }, - "secrets": [ - { - "name": "default-token-bqf98" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: attachdetach-controller in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "attachdetach-controller", - "namespace": "kube-system", - "resourceVersion": "189", - "uid": "144633bd-e1c8-4b8f-add1-99df11690057" - }, - "secrets": [ - { - "name": "attachdetach-controller-token-gd9f6" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: certificate-controller in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "name": "certificate-controller", - "namespace": "kube-system", - "resourceVersion": "269", - "uid": "f93b4ce7-09d7-46a3-a2b0-5c68bce31bce" - }, - "secrets": [ - { - "name": "certificate-controller-token-8cplc" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: cloud-provider in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "cloud-provider", - "namespace": "kube-system", - "resourceVersion": "175", - "uid": "431df3ca-5e51-469f-92c9-cf0062ddb7c0" - }, - "secrets": [ - { - "name": "cloud-provider-token-gk2vf" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: clusterrole-aggregation-controller in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "clusterrole-aggregation-controller", - "namespace": "kube-system", - "resourceVersion": "170", - "uid": "a8d42548-f3e4-4550-b873-87c284960dce" - }, - "secrets": [ - { - "name": "clusterrole-aggregation-controller-token-k8wz6" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: cronjob-controller in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "cronjob-controller", - "namespace": "kube-system", - "resourceVersion": "197", - "uid": "e6ba302f-b335-4595-9755-1e7a56408bda" - }, - "secrets": [ - { - "name": "cronjob-controller-token-b5pzw" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: daemon-set-controller in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "daemon-set-controller", - "namespace": "kube-system", - "resourceVersion": "180", - "uid": "dc43394a-8abe-47f5-8ad0-98e2fd70aa10" - }, - "secrets": [ - { - "name": "daemon-set-controller-token-vthzj" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: default in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "name": "default", - "namespace": "kube-system", - "resourceVersion": "275", - "uid": "750b7660-4e28-4db9-aee3-3d4adf1ece24" - }, - "secrets": [ - { - "name": "default-token-9tb7m" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: deployment-controller in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "name": "deployment-controller", - "namespace": "kube-system", - "resourceVersion": "256", - "uid": "b23c904a-bfca-4baf-b10d-2571b9bb488a" - }, - "secrets": [ - { - "name": "deployment-controller-token-l6m2q" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: disruption-controller in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:04Z", - "name": "disruption-controller", - "namespace": "kube-system", - "resourceVersion": "223", - "uid": "3b480d09-7521-4bfe-89ad-fc61240acdd4" - }, - "secrets": [ - { - "name": "disruption-controller-token-bdnj7" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: endpoint-controller in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "endpoint-controller", - "namespace": "kube-system", - "resourceVersion": "176", - "uid": "4ce5b82a-c67f-4fce-ade8-eec853b5a1b7" - }, - "secrets": [ - { - "name": "endpoint-controller-token-mj4rt" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: endpointslice-controller in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "endpointslice-controller", - "namespace": "kube-system", - "resourceVersion": "173", - "uid": "20c4b65b-1d30-4c09-b652-cec280d16908" - }, - "secrets": [ - { - "name": "endpointslice-controller-token-94zvb" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: endpointslicemirroring-controller in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:04Z", - "name": "endpointslicemirroring-controller", - "namespace": "kube-system", - "resourceVersion": "209", - "uid": "8e2eb49b-79c0-4a57-b409-a0ebceee6a67" - }, - "secrets": [ - { - "name": "endpointslicemirroring-controller-token-tht2z" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: event-exporter-sa in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"event-exporter\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"event-exporter-sa\",\"namespace\":\"kube-system\"}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "event-exporter", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"event-exporter-sa-token-47w9k\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - } - ], - "name": "event-exporter-sa", - "namespace": "kube-system", - "resourceVersion": "351", - "uid": "1095737c-e7af-4484-8f74-8d3978ab4bfa" - }, - "secrets": [ - { - "name": "event-exporter-sa-token-47w9k" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: expand-controller in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "expand-controller", - "namespace": "kube-system", - "resourceVersion": "206", - "uid": "cd0af9ef-67fd-46e4-a584-a840d455cdc5" - }, - "secrets": [ - { - "name": "expand-controller-token-pzxbh" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: fluentbit-gke in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"fluentbit-gke\",\"namespace\":\"kube-system\"}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"fluentbit-gke-token-4rlqt\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - } - ], - "name": "fluentbit-gke", - "namespace": "kube-system", - "resourceVersion": "364", - "uid": "21b31e56-0c04-4a0f-a2ae-3c79eae42f64" - }, - "secrets": [ - { - "name": "fluentbit-gke-token-4rlqt" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: generic-garbage-collector in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "name": "generic-garbage-collector", - "namespace": "kube-system", - "resourceVersion": "265", - "uid": "97100c52-893e-48f7-b28b-f4f5a87fc54a" - }, - "secrets": [ - { - "name": "generic-garbage-collector-token-npnh9" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: gke-metrics-agent in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"gke-metrics-agent\",\"namespace\":\"kube-system\"}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"gke-metrics-agent-token-cr54c\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - } - ], - "name": "gke-metrics-agent", - "namespace": "kube-system", - "resourceVersion": "438", - "uid": "73e0d11f-951c-419c-accf-d690f63d4acf" - }, - "secrets": [ - { - "name": "gke-metrics-agent-token-cr54c" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: job-controller in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "name": "job-controller", - "namespace": "kube-system", - "resourceVersion": "254", - "uid": "e9a33c89-7f18-4987-9c6b-61572d78e1ec" - }, - "secrets": [ - { - "name": "job-controller-token-fnzqp" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: kube-dns in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"kube-dns-token-bqjqb\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "318", - "uid": "aebbecc5-c6e2-4f80-babf-87622bd803cd" - }, - "secrets": [ - { - "name": "kube-dns-token-bqjqb" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: kube-dns-autoscaler in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"kube-dns-autoscaler\",\"namespace\":\"kube-system\"}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"kube-dns-autoscaler-token-qf72n\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - } - ], - "name": "kube-dns-autoscaler", - "namespace": "kube-system", - "resourceVersion": "425", - "uid": "8f319809-961e-4b05-93e2-4591a37a94e9" - }, - "secrets": [ - { - "name": "kube-dns-autoscaler-token-qf72n" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: kube-proxy in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"kube-proxy-token-ggzvr\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "kube-proxy", - "namespace": "kube-system", - "resourceVersion": "589", - "uid": "fbebb17e-15d3-4915-93d8-986d0e1d62da" - }, - "secrets": [ - { - "name": "kube-proxy-token-ggzvr" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: metadata-agent in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"metadata-agent\",\"namespace\":\"kube-system\"}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"metadata-agent-token-l2q28\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - } - ], - "name": "metadata-agent", - "namespace": "kube-system", - "resourceVersion": "374", - "uid": "202e1a63-d72a-47a0-bda4-c120a1f46d91" - }, - "secrets": [ - { - "name": "metadata-agent-token-l2q28" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: metadata-proxy in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"metadata-proxy\",\"namespace\":\"kube-system\"}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"metadata-proxy-token-qwc8k\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - } - ], - "name": "metadata-proxy", - "namespace": "kube-system", - "resourceVersion": "383", - "uid": "6dc742ca-e9d8-47e3-9053-4234cadaec71" - }, - "secrets": [ - { - "name": "metadata-proxy-token-qwc8k" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: metrics-server in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"metrics-server\",\"namespace\":\"kube-system\"}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"metrics-server-token-lg6k7\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - } - ], - "name": "metrics-server", - "namespace": "kube-system", - "resourceVersion": "393", - "uid": "e0eeb751-44be-4ed3-b916-e8c2c92ec824" - }, - "secrets": [ - { - "name": "metrics-server-token-lg6k7" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: namespace-controller in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:04Z", - "name": "namespace-controller", - "namespace": "kube-system", - "resourceVersion": "218", - "uid": "b9d983a9-22fd-4eab-9947-e2e415023502" - }, - "secrets": [ - { - "name": "namespace-controller-token-2pvdr" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: node-controller in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "node-controller", - "namespace": "kube-system", - "resourceVersion": "174", - "uid": "cebab95d-57c7-4802-bfe4-84935feb2311" - }, - "secrets": [ - { - "name": "node-controller-token-5zj2w" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: node-local-dns in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"node-local-dns-token-9d6nn\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "24083494", - "uid": "f14edbb7-51a8-423a-b2fe-1962a00c7e2b" - }, - "secrets": [ - { - "name": "node-local-dns-token-9d6nn" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: pdcsi-node-sa in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-sa\",\"namespace\":\"kube-system\"}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"pdcsi-node-sa-token-5428w\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-sa", - "namespace": "kube-system", - "resourceVersion": "469", - "uid": "4b875be1-9d46-4a5d-a85f-22363ec82d55" - }, - "secrets": [ - { - "name": "pdcsi-node-sa-token-5428w" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: persistent-volume-binder in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "persistent-volume-binder", - "namespace": "kube-system", - "resourceVersion": "203", - "uid": "c326fd6d-a84a-4953-9e97-040554c96690" - }, - "secrets": [ - { - "name": "persistent-volume-binder-token-v56g5" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: pod-garbage-collector in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:04Z", - "name": "pod-garbage-collector", - "namespace": "kube-system", - "resourceVersion": "215", - "uid": "65f94dca-9adf-4df7-b2b6-692a3a3512af" - }, - "secrets": [ - { - "name": "pod-garbage-collector-token-bkbr5" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: pv-protection-controller in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "pv-protection-controller", - "namespace": "kube-system", - "resourceVersion": "182", - "uid": "58ab0ea8-5ea7-45b6-9ef6-44b66d1a2823" - }, - "secrets": [ - { - "name": "pv-protection-controller-token-tb5vd" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: pvc-protection-controller in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "pvc-protection-controller", - "namespace": "kube-system", - "resourceVersion": "194", - "uid": "3024c6c2-404c-4646-b033-153adc3d3908" - }, - "secrets": [ - { - "name": "pvc-protection-controller-token-26d94" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: replicaset-controller in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "name": "replicaset-controller", - "namespace": "kube-system", - "resourceVersion": "260", - "uid": "9f01420f-550e-4f13-a68f-2c09cbad3a90" - }, - "secrets": [ - { - "name": "replicaset-controller-token-kcwjk" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: replication-controller in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:04Z", - "name": "replication-controller", - "namespace": "kube-system", - "resourceVersion": "226", - "uid": "b574c4f3-a3d9-4404-915d-919f39531e11" - }, - "secrets": [ - { - "name": "replication-controller-token-hscgm" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: resourcequota-controller in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "name": "resourcequota-controller", - "namespace": "kube-system", - "resourceVersion": "262", - "uid": "6ff91aed-f556-44a7-8a28-99aae357d5f4" - }, - "secrets": [ - { - "name": "resourcequota-controller-token-6tgpl" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: root-ca-cert-publisher in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "root-ca-cert-publisher", - "namespace": "kube-system", - "resourceVersion": "200", - "uid": "0780a90b-ca2b-4d2b-8a05-9286d147279b" - }, - "secrets": [ - { - "name": "root-ca-cert-publisher-token-4jlgk" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: service-account-controller in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "service-account-controller", - "namespace": "kube-system", - "resourceVersion": "185", - "uid": "45567dfb-6659-4b5b-a3bf-8cb191d14664" - }, - "secrets": [ - { - "name": "service-account-controller-token-xh4fp" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: service-controller in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "name": "service-controller", - "namespace": "kube-system", - "resourceVersion": "271", - "uid": "a6f24dc1-e066-4da2-8292-0e2c0bd8d9a4" - }, - "secrets": [ - { - "name": "service-controller-token-rtdtm" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: statefulset-controller in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "statefulset-controller", - "namespace": "kube-system", - "resourceVersion": "193", - "uid": "a7f24856-c70d-4e1f-985e-702c793035f2" - }, - "secrets": [ - { - "name": "statefulset-controller-token-jjl5b" - } - ] - } - ] - } - }, - { - "alertMessage": "the following service account: ttl-controller in the following namespace: kube-system mounts service account tokens in pods by default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:05Z", - "name": "ttl-controller", - "namespace": "kube-system", - "resourceVersion": "229", - "uid": "dfe7482b-ddd8-4de2-9466-c09519073541" - }, - "secrets": [ - { - "name": "ttl-controller-token-krxpm" - } - ] - } - ] - } - } - ], - "listInputResources": [ - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-audit\",\"namespace\":\"cyberarmor-system\"}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:53Z", - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"ca-audit-token-gw966\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:18:53Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:53Z" - } - ], - "name": "ca-audit", - "namespace": "cyberarmor-system", - "resourceVersion": "60786837", - "uid": "3435abc3-f706-4e0e-b5cc-01782c878849" - }, - "secrets": [ - { - "name": "ca-audit-token-gw966" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-controller-service-account\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-controller-service-account\",\"namespace\":\"cyberarmor-system\"}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:37Z", - "labels": { - "app": "ca-controller-service-account", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"ca-controller-service-account-token-4mnp7\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:18:37Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:37Z" - } - ], - "name": "ca-controller-service-account", - "namespace": "cyberarmor-system", - "resourceVersion": "60786654", - "uid": "e810c8cb-3a30-445f-94c4-d0767ed75e27" - }, - "secrets": [ - { - "name": "ca-controller-service-account-token-4mnp7" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-10-12T00:18:35Z", - "name": "default", - "namespace": "cyberarmor-system", - "resourceVersion": "60786638", - "uid": "6575ea7f-3d9d-405c-a4c4-4fb769409b74" - }, - "secrets": [ - { - "name": "default-token-xppwm" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "name": "default", - "namespace": "default", - "resourceVersion": "283", - "uid": "8a4f2a56-f4a5-4f90-890a-9ee2537fbccc" - }, - "secrets": [ - { - "name": "default-token-7d4nv" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-07-27T19:59:29Z", - "name": "default", - "namespace": "hipster", - "resourceVersion": "24370772", - "uid": "434039dd-abc7-41a2-ad74-119d5e7ccb4e" - }, - "secrets": [ - { - "name": "default-token-j56bb" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "name": "default", - "namespace": "kube-node-lease", - "resourceVersion": "282", - "uid": "2e420c8a-9409-42b4-8834-8fc2de1515c5" - }, - "secrets": [ - { - "name": "default-token-2dqs6" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "name": "default", - "namespace": "kube-public", - "resourceVersion": "279", - "uid": "7d5c649c-307b-4ada-b11a-22f4b2da2bd7" - }, - "secrets": [ - { - "name": "default-token-bqf98" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "attachdetach-controller", - "namespace": "kube-system", - "resourceVersion": "189", - "uid": "144633bd-e1c8-4b8f-add1-99df11690057" - }, - "secrets": [ - { - "name": "attachdetach-controller-token-gd9f6" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "name": "certificate-controller", - "namespace": "kube-system", - "resourceVersion": "269", - "uid": "f93b4ce7-09d7-46a3-a2b0-5c68bce31bce" - }, - "secrets": [ - { - "name": "certificate-controller-token-8cplc" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "cloud-provider", - "namespace": "kube-system", - "resourceVersion": "175", - "uid": "431df3ca-5e51-469f-92c9-cf0062ddb7c0" - }, - "secrets": [ - { - "name": "cloud-provider-token-gk2vf" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "clusterrole-aggregation-controller", - "namespace": "kube-system", - "resourceVersion": "170", - "uid": "a8d42548-f3e4-4550-b873-87c284960dce" - }, - "secrets": [ - { - "name": "clusterrole-aggregation-controller-token-k8wz6" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "cronjob-controller", - "namespace": "kube-system", - "resourceVersion": "197", - "uid": "e6ba302f-b335-4595-9755-1e7a56408bda" - }, - "secrets": [ - { - "name": "cronjob-controller-token-b5pzw" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "daemon-set-controller", - "namespace": "kube-system", - "resourceVersion": "180", - "uid": "dc43394a-8abe-47f5-8ad0-98e2fd70aa10" - }, - "secrets": [ - { - "name": "daemon-set-controller-token-vthzj" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "name": "default", - "namespace": "kube-system", - "resourceVersion": "275", - "uid": "750b7660-4e28-4db9-aee3-3d4adf1ece24" - }, - "secrets": [ - { - "name": "default-token-9tb7m" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "name": "deployment-controller", - "namespace": "kube-system", - "resourceVersion": "256", - "uid": "b23c904a-bfca-4baf-b10d-2571b9bb488a" - }, - "secrets": [ - { - "name": "deployment-controller-token-l6m2q" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:04Z", - "name": "disruption-controller", - "namespace": "kube-system", - "resourceVersion": "223", - "uid": "3b480d09-7521-4bfe-89ad-fc61240acdd4" - }, - "secrets": [ - { - "name": "disruption-controller-token-bdnj7" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "endpoint-controller", - "namespace": "kube-system", - "resourceVersion": "176", - "uid": "4ce5b82a-c67f-4fce-ade8-eec853b5a1b7" - }, - "secrets": [ - { - "name": "endpoint-controller-token-mj4rt" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "endpointslice-controller", - "namespace": "kube-system", - "resourceVersion": "173", - "uid": "20c4b65b-1d30-4c09-b652-cec280d16908" - }, - "secrets": [ - { - "name": "endpointslice-controller-token-94zvb" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:04Z", - "name": "endpointslicemirroring-controller", - "namespace": "kube-system", - "resourceVersion": "209", - "uid": "8e2eb49b-79c0-4a57-b409-a0ebceee6a67" - }, - "secrets": [ - { - "name": "endpointslicemirroring-controller-token-tht2z" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"event-exporter\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"event-exporter-sa\",\"namespace\":\"kube-system\"}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "event-exporter", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"event-exporter-sa-token-47w9k\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - } - ], - "name": "event-exporter-sa", - "namespace": "kube-system", - "resourceVersion": "351", - "uid": "1095737c-e7af-4484-8f74-8d3978ab4bfa" - }, - "secrets": [ - { - "name": "event-exporter-sa-token-47w9k" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "expand-controller", - "namespace": "kube-system", - "resourceVersion": "206", - "uid": "cd0af9ef-67fd-46e4-a584-a840d455cdc5" - }, - "secrets": [ - { - "name": "expand-controller-token-pzxbh" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"fluentbit-gke\",\"namespace\":\"kube-system\"}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"fluentbit-gke-token-4rlqt\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - } - ], - "name": "fluentbit-gke", - "namespace": "kube-system", - "resourceVersion": "364", - "uid": "21b31e56-0c04-4a0f-a2ae-3c79eae42f64" - }, - "secrets": [ - { - "name": "fluentbit-gke-token-4rlqt" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "name": "generic-garbage-collector", - "namespace": "kube-system", - "resourceVersion": "265", - "uid": "97100c52-893e-48f7-b28b-f4f5a87fc54a" - }, - "secrets": [ - { - "name": "generic-garbage-collector-token-npnh9" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"gke-metrics-agent\",\"namespace\":\"kube-system\"}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"gke-metrics-agent-token-cr54c\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - } - ], - "name": "gke-metrics-agent", - "namespace": "kube-system", - "resourceVersion": "438", - "uid": "73e0d11f-951c-419c-accf-d690f63d4acf" - }, - "secrets": [ - { - "name": "gke-metrics-agent-token-cr54c" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "name": "job-controller", - "namespace": "kube-system", - "resourceVersion": "254", - "uid": "e9a33c89-7f18-4987-9c6b-61572d78e1ec" - }, - "secrets": [ - { - "name": "job-controller-token-fnzqp" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"kube-dns-token-bqjqb\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "318", - "uid": "aebbecc5-c6e2-4f80-babf-87622bd803cd" - }, - "secrets": [ - { - "name": "kube-dns-token-bqjqb" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"kube-dns-autoscaler\",\"namespace\":\"kube-system\"}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"kube-dns-autoscaler-token-qf72n\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - } - ], - "name": "kube-dns-autoscaler", - "namespace": "kube-system", - "resourceVersion": "425", - "uid": "8f319809-961e-4b05-93e2-4591a37a94e9" - }, - "secrets": [ - { - "name": "kube-dns-autoscaler-token-qf72n" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"kube-proxy-token-ggzvr\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "kube-proxy", - "namespace": "kube-system", - "resourceVersion": "589", - "uid": "fbebb17e-15d3-4915-93d8-986d0e1d62da" - }, - "secrets": [ - { - "name": "kube-proxy-token-ggzvr" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"metadata-agent\",\"namespace\":\"kube-system\"}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"metadata-agent-token-l2q28\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - } - ], - "name": "metadata-agent", - "namespace": "kube-system", - "resourceVersion": "374", - "uid": "202e1a63-d72a-47a0-bda4-c120a1f46d91" - }, - "secrets": [ - { - "name": "metadata-agent-token-l2q28" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"metadata-proxy\",\"namespace\":\"kube-system\"}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"metadata-proxy-token-qwc8k\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - } - ], - "name": "metadata-proxy", - "namespace": "kube-system", - "resourceVersion": "383", - "uid": "6dc742ca-e9d8-47e3-9053-4234cadaec71" - }, - "secrets": [ - { - "name": "metadata-proxy-token-qwc8k" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"metrics-server\",\"namespace\":\"kube-system\"}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"metrics-server-token-lg6k7\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - } - ], - "name": "metrics-server", - "namespace": "kube-system", - "resourceVersion": "393", - "uid": "e0eeb751-44be-4ed3-b916-e8c2c92ec824" - }, - "secrets": [ - { - "name": "metrics-server-token-lg6k7" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:04Z", - "name": "namespace-controller", - "namespace": "kube-system", - "resourceVersion": "218", - "uid": "b9d983a9-22fd-4eab-9947-e2e415023502" - }, - "secrets": [ - { - "name": "namespace-controller-token-2pvdr" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "node-controller", - "namespace": "kube-system", - "resourceVersion": "174", - "uid": "cebab95d-57c7-4802-bfe4-84935feb2311" - }, - "secrets": [ - { - "name": "node-controller-token-5zj2w" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"node-local-dns-token-9d6nn\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "24083494", - "uid": "f14edbb7-51a8-423a-b2fe-1962a00c7e2b" - }, - "secrets": [ - { - "name": "node-local-dns-token-9d6nn" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-sa\",\"namespace\":\"kube-system\"}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:secrets": { - ".": {}, - "k:{\"name\":\"pdcsi-node-sa-token-5428w\"}": { - ".": {}, - "f:name": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-sa", - "namespace": "kube-system", - "resourceVersion": "469", - "uid": "4b875be1-9d46-4a5d-a85f-22363ec82d55" - }, - "secrets": [ - { - "name": "pdcsi-node-sa-token-5428w" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "persistent-volume-binder", - "namespace": "kube-system", - "resourceVersion": "203", - "uid": "c326fd6d-a84a-4953-9e97-040554c96690" - }, - "secrets": [ - { - "name": "persistent-volume-binder-token-v56g5" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:04Z", - "name": "pod-garbage-collector", - "namespace": "kube-system", - "resourceVersion": "215", - "uid": "65f94dca-9adf-4df7-b2b6-692a3a3512af" - }, - "secrets": [ - { - "name": "pod-garbage-collector-token-bkbr5" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "pv-protection-controller", - "namespace": "kube-system", - "resourceVersion": "182", - "uid": "58ab0ea8-5ea7-45b6-9ef6-44b66d1a2823" - }, - "secrets": [ - { - "name": "pv-protection-controller-token-tb5vd" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "pvc-protection-controller", - "namespace": "kube-system", - "resourceVersion": "194", - "uid": "3024c6c2-404c-4646-b033-153adc3d3908" - }, - "secrets": [ - { - "name": "pvc-protection-controller-token-26d94" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "name": "replicaset-controller", - "namespace": "kube-system", - "resourceVersion": "260", - "uid": "9f01420f-550e-4f13-a68f-2c09cbad3a90" - }, - "secrets": [ - { - "name": "replicaset-controller-token-kcwjk" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:04Z", - "name": "replication-controller", - "namespace": "kube-system", - "resourceVersion": "226", - "uid": "b574c4f3-a3d9-4404-915d-919f39531e11" - }, - "secrets": [ - { - "name": "replication-controller-token-hscgm" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "name": "resourcequota-controller", - "namespace": "kube-system", - "resourceVersion": "262", - "uid": "6ff91aed-f556-44a7-8a28-99aae357d5f4" - }, - "secrets": [ - { - "name": "resourcequota-controller-token-6tgpl" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "root-ca-cert-publisher", - "namespace": "kube-system", - "resourceVersion": "200", - "uid": "0780a90b-ca2b-4d2b-8a05-9286d147279b" - }, - "secrets": [ - { - "name": "root-ca-cert-publisher-token-4jlgk" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "service-account-controller", - "namespace": "kube-system", - "resourceVersion": "185", - "uid": "45567dfb-6659-4b5b-a3bf-8cb191d14664" - }, - "secrets": [ - { - "name": "service-account-controller-token-xh4fp" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "name": "service-controller", - "namespace": "kube-system", - "resourceVersion": "271", - "uid": "a6f24dc1-e066-4da2-8292-0e2c0bd8d9a4" - }, - "secrets": [ - { - "name": "service-controller-token-rtdtm" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:03Z", - "name": "statefulset-controller", - "namespace": "kube-system", - "resourceVersion": "193", - "uid": "a7f24856-c70d-4e1f-985e-702c793035f2" - }, - "secrets": [ - { - "name": "statefulset-controller-token-jjl5b" - } - ] - }, - { - "apiVersion": "v1", - "kind": "ServiceAccount", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:05Z", - "name": "ttl-controller", - "namespace": "kube-system", - "resourceVersion": "229", - "uid": "dfe7482b-ddd8-4de2-9466-c09519073541" - }, - "secrets": [ - { - "name": "ttl-controller-token-krxpm" - } - ] - } - ], - "listInputKinds": null - } - ], - "remediation": "Disable automatic mounting of service account tokens to PODs either at the service account level or at the individual POD level, by specifying the automountServiceAccountToken: false. Note that POD level takes precedence.", - "description": "Potential attacker may gain access to a POD and steal its service account token. Therefore, it is recommended to disable automatic mapping of the service account tokens in service account configuration and enable it only for PODs that need to use them.", - "score": 0 - }, - { - "guid": "", - "attributes": { - "armoBuiltin": true - }, - "id": "C-0041", - "controlID": "C-0041", - "name": "hostNetwork access", - "ruleReports": [ - { - "name": "host-network-access", - "remediation": "", - "ruleStatus": { - "status": "success", - "message": "" - }, - "ruleResponses": [ - { - "alertMessage": "Pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq is connected to the host network", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:02:45.009201226Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:02:48Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"6de798cc-d558-479a-8ef4-38363e434633\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.63\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:02:55Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-5naq", - "uid": "6de798cc-d558-479a-8ef4-38363e434633" - } - ], - "resourceVersion": "53108585", - "uid": "fdd66d80-d09d-4b43-a291-b3797c7a5864" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-5naq", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://50767376b8a42b7a390e84c5c451d1485b1a562873b915100dc605bbcc49c1c5", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:02:48Z" - } - } - } - ], - "hostIP": "10.132.0.63", - "phase": "Running", - "podIP": "10.132.0.63", - "podIPs": [ - { - "ip": "10.132.0.63" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:02:46Z" - } - } - ] - } - }, - { - "alertMessage": "Pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3 is connected to the host network", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:09:05.595580038Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:09:09Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"d288c56c-2a00-42fe-b2ea-b8761fec2a4e\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.193\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:09:16Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-abj3", - "uid": "d288c56c-2a00-42fe-b2ea-b8761fec2a4e" - } - ], - "resourceVersion": "53110982", - "uid": "0866b060-d7a6-40bc-9ed9-292fbce958e9" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-abj3", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b04121a3de085254493b48dbe1be551abd021877d1c098afbd19e6429df8f4ba", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:09:08Z" - } - } - } - ], - "hostIP": "10.132.15.193", - "phase": "Running", - "podIP": "10.132.15.193", - "podIPs": [ - { - "ip": "10.132.15.193" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:09:06Z" - } - } - ] - } - }, - { - "alertMessage": "Pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8 is connected to the host network", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:56:27.195784979Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:56:29Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"9aa58d78-0147-4564-9900-0409a6bec341\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.61\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:56:37Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-enr8", - "uid": "9aa58d78-0147-4564-9900-0409a6bec341" - } - ], - "resourceVersion": "53106105", - "uid": "b940e7b5-9e7f-4ac7-a3ee-6c6655c1e65a" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-enr8", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b9375aed4bc463ecfa5fcfb0cfb3b55d087416bfe0c3267c1395e8f93569d03c", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:56:29Z" - } - } - } - ], - "hostIP": "10.132.0.61", - "phase": "Running", - "podIP": "10.132.0.61", - "podIPs": [ - { - "ip": "10.132.0.61" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:56:28Z" - } - } - ] - } - }, - { - "alertMessage": "Pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w is connected to the host network", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:59:41.285621877Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:59:44Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"c1ab3c15-9764-40f5-ba6b-82556dc98ea2\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.62\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:59:52Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-oq2w", - "uid": "c1ab3c15-9764-40f5-ba6b-82556dc98ea2" - } - ], - "resourceVersion": "53107378", - "uid": "19e52dea-6339-4ed7-8e32-3d39b242d133" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-oq2w", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://a0b27bef16953a38c48075124547583280bccf28d1d6cf54c3b3e754e2847c86", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:59:44Z" - } - } - } - ], - "hostIP": "10.132.0.62", - "phase": "Running", - "podIP": "10.132.0.62", - "podIPs": [ - { - "ip": "10.132.0.62" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:59:42Z" - } - } - ] - } - }, - { - "alertMessage": "Pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp is connected to the host network", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:12:12.095932889Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:12:15Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"7042c0e8-8dc5-4d1d-8b36-92c692c31c76\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.194\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:12:22Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-rgdp", - "uid": "7042c0e8-8dc5-4d1d-8b36-92c692c31c76" - } - ], - "resourceVersion": "53112149", - "uid": "5248c280-7bde-4fe9-a74e-56ae25abb0d2" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-rgdp", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://fd91ae480585a78c59ef401dc852d58921e76693ecbd908d98e4b63da6c298ff", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:12:14Z" - } - } - } - ], - "hostIP": "10.132.15.194", - "phase": "Running", - "podIP": "10.132.15.194", - "podIPs": [ - { - "ip": "10.132.15.194" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:12:13Z" - } - } - ] - } - }, - { - "alertMessage": "Pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-x940 is connected to the host network", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:05:45.558688986Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:05:49Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"a58f61e7-9d9e-4266-90d4-16b9969cb373\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.192\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:05:56Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-x940", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-x940", - "uid": "a58f61e7-9d9e-4266-90d4-16b9969cb373" - } - ], - "resourceVersion": "53109692", - "uid": "71a05734-f741-4b7e-82fe-765c555b3607" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-x940", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://6abab671623159f7174321118f58600f8955267a139a72508e9a73631ef7920d", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:05:48Z" - } - } - } - ], - "hostIP": "10.132.15.192", - "phase": "Running", - "podIP": "10.132.15.192", - "podIPs": [ - { - "ip": "10.132.15.192" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:05:46Z" - } - } - ] - } - }, - { - "alertMessage": "Pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg is connected to the host network", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:15:06.466708143Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:15:10Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"65f37105-dd71-428b-bf8b-0e82b88027f1\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.195\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:15:17Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-zzyg", - "uid": "65f37105-dd71-428b-bf8b-0e82b88027f1" - } - ], - "resourceVersion": "53113200", - "uid": "dac23622-ae54-4a1a-a6ca-3c020911966e" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-zzyg", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://ee309dad5cb7047fcbd7eb0401760ccb4bd986080ab11c860911e37b132a2a5c", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:15:09Z" - } - } - } - ], - "hostIP": "10.132.15.195", - "phase": "Running", - "podIP": "10.132.15.195", - "podIPs": [ - { - "ip": "10.132.15.195" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:15:07Z" - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: kube-proxy has a pod connected to the host network", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "6", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-proxy\"},\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-proxy\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-proxy\"}},\"spec\":{\"containers\":[{\"command\":[\"/bin/sh\",\"-c\",\"kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\\u003e\\u003e/var/log/kube-proxy.log 2\\u003e\\u00261\"],\"env\":[{\"name\":\"KUBERNETES_SERVICE_HOST\",\"value\":\"34.78.97.243\"}],\"image\":\"gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001\",\"name\":\"kube-proxy\",\"resources\":{\"requests\":{\"cpu\":\"100m\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/log\",\"name\":\"varlog\",\"readOnly\":false},{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/lib/modules\",\"name\":\"lib-modules\",\"readOnly\":true}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\",\"node.kubernetes.io/kube-proxy-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"kube-proxy\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/log\"},\"name\":\"varlog\"},{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"hostPath\":{\"path\":\"/lib/modules\"},\"name\":\"lib-modules\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "generation": 6, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-proxy" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBERNETES_SERVICE_HOST\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/kube-proxy-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - "f:command": {}, - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:44Z" - } - ], - "name": "kube-proxy", - "namespace": "kube-system", - "resourceVersion": "52161714", - "uid": "bb6f9ab0-e586-407b-95c0-773637c696e8" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-proxy" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-proxy" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "env": [ - { - "name": "KUBERNETES_SERVICE_HOST", - "value": "34.78.97.243" - } - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux", - "node.kubernetes.io/kube-proxy-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "kube-proxy", - "serviceAccountName": "kube-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 6 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: metadata-proxy-v0.1 has a pod connected to the host network", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"},\"name\":\"metadata-proxy-v0.1\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metadata-proxy\",\"version\":\"v0.1\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"}},\"spec\":{\"containers\":[{\"args\":[\"--addr=0.0.0.0:988\"],\"image\":\"k8s.gcr.io/metadata-proxy:v0.1.12\",\"name\":\"metadata-proxy\",\"resources\":{\"limits\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"},\"requests\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"}},\"securityContext\":{\"privileged\":true}}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"cloud.google.com/metadata-proxy-ready\":\"true\",\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"metadata-proxy\",\"terminationGracePeriodSeconds\":30,\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 3, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:cloud.google.com/metadata-proxy-ready": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - "f:args": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - } - ], - "name": "metadata-proxy-v0.1", - "namespace": "kube-system", - "resourceVersion": "25934435", - "uid": "94bf5845-f77b-47d4-bcec-e78549b4d8a3" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metadata-proxy", - "version": "v0.1" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--addr=0.0.0.0:988" - ], - "image": "k8s.gcr.io/metadata-proxy:v0.1.12", - "imagePullPolicy": "IfNotPresent", - "name": "metadata-proxy", - "resources": { - "limits": { - "cpu": "30m", - "memory": "25Mi" - }, - "requests": { - "cpu": "30m", - "memory": "25Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "cloud.google.com/metadata-proxy-ready": "true", - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "metadata-proxy", - "serviceAccountName": "metadata-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 3 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: node-local-dns has a pod connected to the host network", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"node-local-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"node-local-dns\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"nodelocaldns\",\"components.gke.io/component-version\":\"1.4.0\",\"prometheus.io/port\":\"9253\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"k8s-app\":\"node-local-dns\"}},\"spec\":{\"containers\":[{\"args\":[\"-localip\",\"169.254.20.10,10.72.0.10\",\"-conf\",\"/etc/Corefile\",\"-upstreamsvc\",\"kube-dns-upstream\",\"-kubednscm\",\"/etc/kube-dns\"],\"image\":\"gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1\",\"livenessProbe\":{\"httpGet\":{\"host\":\"169.254.20.10\",\"path\":\"/health\",\"port\":8080},\"initialDelaySeconds\":60,\"timeoutSeconds\":5},\"name\":\"node-cache\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"},{\"containerPort\":9253,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"25m\",\"memory\":\"5Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/etc/coredns\",\"name\":\"config-volume\"},{\"mountPath\":\"/etc/kube-dns\",\"name\":\"kube-dns-config\"}]}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"addon.gke.io/node-local-dns-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"node-local-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"},{\"configMap\":{\"items\":[{\"key\":\"Corefile\",\"path\":\"Corefile.base\"}],\"name\":\"node-local-dns\"},\"name\":\"config-volume\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"}}}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "node-local-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:host": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":9253,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/coredns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/kube-dns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:addon.gke.io/node-local-dns-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "53114241", - "uid": "5069e9ba-0784-41bf-9577-3757bcb3b6d6" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "node-local-dns" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "nodelocaldns", - "components.gke.io/component-version": "1.4.0", - "prometheus.io/port": "9253", - "prometheus.io/scrape": "true" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "node-local-dns" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-localip", - "169.254.20.10,10.72.0.10", - "-conf", - "/etc/Corefile", - "-upstreamsvc", - "kube-dns-upstream", - "-kubednscm", - "/etc/kube-dns" - ], - "image": "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "host": "169.254.20.10", - "path": "/health", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "node-cache", - "ports": [ - { - "containerPort": 53, - "hostPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "hostPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - }, - { - "containerPort": 9253, - "hostPort": 9253, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "25m", - "memory": "5Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/etc/coredns", - "name": "config-volume" - }, - { - "mountPath": "/etc/kube-dns", - "name": "kube-dns-config" - } - ] - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "addon.gke.io/node-local-dns-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "node-local-dns", - "serviceAccountName": "node-local-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "Corefile", - "path": "Corefile.base" - } - ], - "name": "node-local-dns" - }, - "name": "config-volume" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 2, - "updatedNumberScheduled": 7 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: pdcsi-node has a pod connected to the host network", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - } - ] - } - } - ], - "listInputResources": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-audit\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-audit\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CONFIG_FILES\",\"value\":\"/config/config.json\"},{\"name\":\"CA_SERVER_TYPE\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"cluster_kind\",\"name\":\"ca-audit\"}}}],\"image\":\"quay.io/armosec/k8s-ca-auditlog-ubi:21\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-audit\",\"ports\":[{\"containerPort\":443,\"name\":\"ca-audit-port\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/config\",\"name\":\"ca-audit\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-audit\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"config\",\"path\":\"config.json\"}],\"name\":\"ca-audit\"},\"name\":\"ca-audit\"},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:54Z", - "generation": 1, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CONFIG_FILES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_SERVER_TYPE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:54Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-audit", - "namespace": "cyberarmor-system", - "resourceVersion": "60787209", - "uid": "687f52ea-6956-4e8a-bb8c-7ea35a04b3f0" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-audit" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CONFIG_FILES", - "value": "/config/config.json" - }, - { - "name": "CA_SERVER_TYPE", - "valueFrom": { - "configMapKeyRef": { - "key": "cluster_kind", - "name": "ca-audit" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-auditlog-ubi:21", - "imagePullPolicy": "Always", - "name": "ca-audit", - "ports": [ - { - "containerPort": 443, - "name": "ca-audit-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/config", - "name": "ca-audit", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-audit", - "serviceAccountName": "ca-audit", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "config", - "path": "config.json" - } - ], - "name": "ca-audit" - }, - "name": "ca-audit" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:54Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-audit-c667df747\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-dashboard-aggregator\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-dashboard-aggregator\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-configtype=1\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-dashboard-aggregator\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"40Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:55Z", - "generation": 1, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-dashboard-aggregator\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:55Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T23:55:20Z" - } - ], - "name": "ca-dashboard-aggregator", - "namespace": "cyberarmor-system", - "resourceVersion": "61250607", - "uid": "0ba23569-e254-4388-b22f-30cc1eca031b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-dashboard-aggregator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-configtype=1", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173", - "imagePullPolicy": "Always", - "name": "ca-dashboard-aggregator", - "resources": { - "limits": { - "cpu": "200m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "40Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:18:55Z", - "lastUpdateTime": "2021-10-12T00:19:19Z", - "message": "ReplicaSet \"ca-dashboard-aggregator-5b8bdbc8f5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-12T23:55:20Z", - "lastUpdateTime": "2021-10-12T23:55:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-notification-server\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-notification-server\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"maserNotificationServer\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\",\"value\":\"customerGUID\"},{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\",\"value\":\"8001\"},{\"name\":\"CA_NOTIFICATION_SERVER_PORT\",\"value\":\"8002\"}],\"image\":\"quay.io/armosec/notification-server-ubi:89\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-notification-server\",\"ports\":[{\"containerPort\":8001,\"name\":\"websocket\"},{\"containerPort\":8002,\"name\":\"rest-api\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:59Z", - "generation": 1, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-notification-server\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8001,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:59Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:11Z" - } - ], - "name": "ca-notification-server", - "namespace": "cyberarmor-system", - "resourceVersion": "60787036", - "uid": "8c3dc6fe-e730-4364-8445-dc5a05ad2b0f" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-notification-server" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_HOST", - "valueFrom": { - "configMapKeyRef": { - "key": "maserNotificationServer", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_ATTRIBUTES", - "value": "customerGUID" - }, - { - "name": "CA_NOTIFICATION_SERVER_WS_PORT", - "value": "8001" - }, - { - "name": "CA_NOTIFICATION_SERVER_PORT", - "value": "8002" - } - ], - "image": "quay.io/armosec/notification-server-ubi:89", - "imagePullPolicy": "Always", - "name": "ca-notification-server", - "ports": [ - { - "containerPort": 8001, - "name": "websocket", - "protocol": "TCP" - }, - { - "containerPort": 8002, - "name": "rest-api", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "50Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:11Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:59Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "ReplicaSet \"ca-notification-server-6fd966c875\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-ocimage\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-ocimage\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-ocimage:63\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-ocimage\",\"ports\":[{\"containerPort\":8080,\"name\":\"ca-ocimage-port\"}],\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:51Z", - "generation": 1, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-ocimage\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:04Z" - } - ], - "name": "ca-ocimage", - "namespace": "cyberarmor-system", - "resourceVersion": "60786986", - "uid": "a6d37edf-b144-4677-91b3-73c73d9c7df6" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-ocimage" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-ocimage:63", - "imagePullPolicy": "Always", - "name": "ca-ocimage", - "ports": [ - { - "containerPort": 8080, - "name": "ca-ocimage-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "1", - "memory": "1000Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:04Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:51Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "ReplicaSet \"ca-ocimage-5576ff7d7d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-oracle\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-oracle\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_ORACLE_PORT\",\"value\":\"4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8002\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-oracle-ubi:11\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-oracle\",\"ports\":[{\"containerPort\":4000,\"name\":\"ca-oracle\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:19:01Z", - "generation": 1, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-oracle\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:19:01Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-oracle", - "namespace": "cyberarmor-system", - "resourceVersion": "60787203", - "uid": "da3dd21c-bf13-4d2a-97da-ca80b94d08d3" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-oracle" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_ORACLE_PORT", - "value": "4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8002" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-oracle-ubi:11", - "imagePullPolicy": "Always", - "name": "ca-oracle", - "ports": [ - { - "containerPort": 4000, - "name": "ca-oracle", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:19:01Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-oracle-6c98c6bdbf\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-posture\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-posture\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8001\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-posture-ubi:112\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-posture\",\"ports\":[{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/resources/config\",\"name\":\"ca-posture-score-config\",\"readOnly\":false},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"},{\"configMap\":{\"items\":[{\"key\":\"resourcesdict.json\",\"path\":\"resourcesdict.json\"},{\"key\":\"frameworkdict.json\",\"path\":\"frameworkdict.json\"}],\"name\":\"ca-posture-score-config\"},\"name\":\"ca-posture-score-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:58Z", - "generation": 1, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-posture\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/resources/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-posture-score-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:58Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:45Z" - } - ], - "name": "ca-posture", - "namespace": "cyberarmor-system", - "resourceVersion": "60787259", - "uid": "f41f4dc1-cfb0-4201-bca7-f1cf0b72b6b7" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-posture" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8001" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-posture-ubi:112", - "imagePullPolicy": "Always", - "name": "ca-posture", - "ports": [ - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "500m", - "memory": "100Mi" - }, - "requests": { - "cpu": "100m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/resources/config", - "name": "ca-posture-score-config" - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "resourcesdict.json", - "path": "resourcesdict.json" - }, - { - "key": "frameworkdict.json", - "path": "frameworkdict.json" - } - ], - "name": "ca-posture-score-config" - }, - "name": "ca-posture-score-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:45Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:58Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "ReplicaSet \"ca-posture-5996968d7b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-rbac\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-rbac\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"S3_BUCKET\",\"value\":\"ca-kubernetes-rbac-db-dev\"},{\"name\":\"AWS_REGION\",\"value\":\"eu-west-1\"},{\"name\":\"AWS_ACCESS_KEY_ID\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keyid\",\"name\":\"ca-rbac\"}}},{\"name\":\"AWS_SECRET_ACCESS_KEY\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keysecret\",\"name\":\"ca-rbac\"}}}],\"image\":\"quay.io/armosec/k8s-ca-rbac-scanner-ubi:20\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-rbac\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"400Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:50Z", - "generation": 1, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-rbac\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AWS_ACCESS_KEY_ID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"AWS_REGION\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"AWS_SECRET_ACCESS_KEY\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"S3_BUCKET\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:13Z" - } - ], - "name": "ca-rbac", - "namespace": "cyberarmor-system", - "resourceVersion": "60787051", - "uid": "d5898a09-2489-4254-b210-0725ddb2427a" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-rbac" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "S3_BUCKET", - "value": "ca-kubernetes-rbac-db-dev" - }, - { - "name": "AWS_REGION", - "value": "eu-west-1" - }, - { - "name": "AWS_ACCESS_KEY_ID", - "valueFrom": { - "secretKeyRef": { - "key": "keyid", - "name": "ca-rbac" - } - } - }, - { - "name": "AWS_SECRET_ACCESS_KEY", - "valueFrom": { - "secretKeyRef": { - "key": "keysecret", - "name": "ca-rbac" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-rbac-scanner-ubi:20", - "imagePullPolicy": "Always", - "name": "ca-rbac", - "resources": { - "limits": { - "cpu": "200m", - "memory": "400Mi" - }, - "requests": { - "cpu": "10m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:13Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:50Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "ReplicaSet \"ca-rbac-75c8cfd6b4\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-vuln-scan\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-vuln-scan\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"EVENT_RECEIVER_URL\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\",\"value\":\"4\"}],\"image\":\"quay.io/armosec/k8s-ca-vuln-scan-ubi:84\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-vuln-scan\",\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1.5Gi\"},\"requests\":{\"cpu\":\"500m\",\"memory\":\"1Gi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:47Z", - "generation": 1, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-vuln-scan\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EVENT_RECEIVER_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:00Z" - } - ], - "name": "ca-vuln-scan", - "namespace": "cyberarmor-system", - "resourceVersion": "60786938", - "uid": "9ea3d6cb-c6c0-423f-aab2-630827939285" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-vuln-scan" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "EVENT_RECEIVER_URL", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_MAX_VULN_SCAN_ROUTINS", - "value": "4" - } - ], - "image": "quay.io/armosec/k8s-ca-vuln-scan-ubi:84", - "imagePullPolicy": "Always", - "name": "ca-vuln-scan", - "resources": { - "limits": { - "cpu": "1", - "memory": "1536Mi" - }, - "requests": { - "cpu": "500m", - "memory": "1Gi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:00Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:47Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "ReplicaSet \"ca-vuln-scan-75b499df8c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-webhook\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-webhook\"}},\"template\":{\"metadata\":{\"annotations\":{\"certificate\":\"d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt\"},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-tlsCertFile=/etc/webhook/certs/tls.crt\",\"-tlsKeyFile=/etc/webhook/certs/tls.key\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_WEBHOOK_NAME\",\"value\":\"ca-webhook\"},{\"name\":\"CA_WEBHOOK_PORT\",\"value\":\"443\"},{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_LOGIN_SECRET_NAME\",\"value\":\"ca-login\"},{\"name\":\"CA_ORACLE_SERVER\",\"value\":\"http://ca-oracle:4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"http://ca-notification-server:8001\"},{\"name\":\"CA_OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-webhook-ubi:606\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-webhook\",\"ports\":[{\"containerPort\":443,\"name\":\"mutating-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"600Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"100Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/cazips\",\"name\":\"zip-download\"},{\"mountPath\":\"/etc/webhook/certs\",\"name\":\"ca-cluster-certificate\",\"readOnly\":true},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"emptyDir\":{},\"name\":\"zip-download\"},{\"name\":\"ca-cluster-certificate\",\"secret\":{\"secretName\":\"ca-cluster-certificate\"}},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:46Z", - "generation": 1, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:certificate": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-webhook\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_LOGIN_SECRET_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/cazips\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/webhook/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-cluster-certificate\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"zip-download\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:16Z" - } - ], - "name": "ca-webhook", - "namespace": "cyberarmor-system", - "resourceVersion": "60787072", - "uid": "c968fe90-8480-471f-bdf1-fa98447ce1d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-webhook" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "certificate": "d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt" - }, - "creationTimestamp": null, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-tlsCertFile=/etc/webhook/certs/tls.crt", - "-tlsKeyFile=/etc/webhook/certs/tls.key", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_WEBHOOK_NAME", - "value": "ca-webhook" - }, - { - "name": "CA_WEBHOOK_PORT", - "value": "443" - }, - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_LOGIN_SECRET_NAME", - "value": "ca-login" - }, - { - "name": "CA_ORACLE_SERVER", - "value": "http://ca-oracle:4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "http://ca-notification-server:8001" - }, - { - "name": "CA_OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-webhook-ubi:606", - "imagePullPolicy": "Always", - "name": "ca-webhook", - "ports": [ - { - "containerPort": 443, - "name": "mutating-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "600Mi" - }, - "requests": { - "cpu": "300m", - "memory": "100Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/cazips", - "name": "zip-download" - }, - { - "mountPath": "/etc/webhook/certs", - "name": "ca-cluster-certificate", - "readOnly": true - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "emptyDir": {}, - "name": "zip-download" - }, - { - "name": "ca-cluster-certificate", - "secret": { - "defaultMode": 420, - "secretName": "ca-cluster-certificate" - } - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:16Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:46Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "ReplicaSet \"ca-webhook-7dd8bbd798\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-websocket\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-websocket\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_VULN_SCAN_SCHEDULE\",\"value\":\"@every 11h\"},{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\",\"value\":\"@every 12h\"},{\"name\":\"CA_DEBUG_SIGNER\",\"value\":null}],\"image\":\"quay.io/armosec/k8s-ca-websocket-ubi:406\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-websocket\",\"ports\":[{\"containerPort\":4002,\"name\":\"trigger-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:43Z", - "generation": 1, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-websocket\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_DEBUG_SIGNER\"}": { - ".": {}, - "f:name": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_VULN_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:14Z" - } - ], - "name": "ca-websocket", - "namespace": "cyberarmor-system", - "resourceVersion": "60787065", - "uid": "914f30e9-d858-4945-9314-cbd3422ebaab" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-websocket" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_VULN_SCAN_SCHEDULE", - "value": "@every 11h" - }, - { - "name": "CA_POSTURE_SCAN_SCHEDULE", - "value": "@every 12h" - }, - { - "name": "CA_DEBUG_SIGNER" - } - ], - "image": "quay.io/armosec/k8s-ca-websocket-ubi:406", - "imagePullPolicy": "Always", - "name": "ca-websocket", - "ports": [ - { - "containerPort": 4002, - "name": "trigger-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "1000Mi" - }, - "requests": { - "cpu": "300m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:14Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:43Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "ReplicaSet \"ca-websocket-857758846f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"adservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"adservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"adservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/adservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"name\":\"server\",\"ports\":[{\"containerPort\":9555}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"180Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:51Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":9555,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:12Z" - } - ], - "name": "adservice", - "namespace": "hipster", - "resourceVersion": "61263240", - "uid": "368bea36-82be-4c28-8607-cf931a836185" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "adservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6415784d-d96b-4866-9c10-d571c8d8fd35", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:29", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-adservice" - }, - "creationTimestamp": null, - "labels": { - "app": "adservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/adservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 9555, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "300Mi" - }, - "requests": { - "cpu": "200m", - "memory": "180Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:24Z", - "lastUpdateTime": "2021-10-12T00:12:24Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:51Z", - "lastUpdateTime": "2021-10-13T00:28:12Z", - "message": "ReplicaSet \"adservice-7864446d5c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"cartservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"cartservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"cartservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"REDIS_ADDR\",\"value\":\"redis-cart:6379\"}],\"image\":\"gcr.io/google-samples/microservices-demo/cartservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15,\"periodSeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":7070}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:47Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"REDIS_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7070,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T09:40:08Z" - } - ], - "name": "cartservice", - "namespace": "hipster", - "resourceVersion": "61443544", - "uid": "df767287-ffc1-4559-b7fd-32b09bf6208c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "cartservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "7ced7c5c-c483-40b3-b6bc-8829339dc3e1", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:04", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-cartservice" - }, - "creationTimestamp": null, - "labels": { - "app": "cartservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "REDIS_ADDR", - "value": "redis-cart:6379" - } - ], - "image": "gcr.io/google-samples/microservices-demo/cartservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7070, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "128Mi" - }, - "requests": { - "cpu": "200m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-13T00:27:35Z", - "message": "ReplicaSet \"cartservice-7c8f8f9ddd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T09:40:08Z", - "lastUpdateTime": "2021-10-13T09:40:08Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"checkoutservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"checkoutservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"checkoutservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"5050\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"PAYMENT_SERVICE_ADDR\",\"value\":\"paymentservice:50051\"},{\"name\":\"EMAIL_SERVICE_ADDR\",\"value\":\"emailservice:5000\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"}],\"image\":\"gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":5050}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:42Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EMAIL_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PAYMENT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":5050,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:42Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:41Z" - } - ], - "name": "checkoutservice", - "namespace": "hipster", - "resourceVersion": "61262985", - "uid": "b5e6a8d8-1ec6-4acc-bf14-e3bb28bff284" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "checkoutservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "bebad8bb-8728-4813-ae19-d22a38a289a5", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:28", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-checkoutservice" - }, - "creationTimestamp": null, - "labels": { - "app": "checkoutservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "5050" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "PAYMENT_SERVICE_ADDR", - "value": "paymentservice:50051" - }, - { - "name": "EMAIL_SERVICE_ADDR", - "value": "emailservice:5000" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - } - ], - "image": "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 5050, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T14:05:32Z", - "lastUpdateTime": "2021-10-12T14:05:32Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:42Z", - "lastUpdateTime": "2021-10-13T00:27:42Z", - "message": "ReplicaSet \"checkoutservice-86c564466c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"currencyservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"currencyservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"currencyservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"7000\"}],\"image\":\"gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":7000,\"name\":\"grpc\"}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T08:37:54Z" - } - ], - "name": "currencyservice", - "namespace": "hipster", - "resourceVersion": "61423238", - "uid": "167b75e1-1be2-4764-aaad-dbb1ae248d3c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "currencyservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "4aa34494-0348-4859-9e29-56df9baf52ba", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-currencyservice" - }, - "creationTimestamp": null, - "labels": { - "app": "currencyservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "7000" - } - ], - "image": "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7000, - "name": "grpc", - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:29:19Z", - "message": "ReplicaSet \"currencyservice-544b6d849c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T08:37:54Z", - "lastUpdateTime": "2021-10-13T08:37:54Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"emailservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"emailservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"emailservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"DISABLE_PROFILER\",\"value\":\"1\"}],\"image\":\"gcr.io/google-samples/microservices-demo/emailservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:41Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"DISABLE_PROFILER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:41Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:07Z" - } - ], - "name": "emailservice", - "namespace": "hipster", - "resourceVersion": "61263204", - "uid": "9959433f-c964-4e6d-a2d7-3d1b9b617948" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "emailservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "e8aa9826-2367-44e1-9aad-a6d617b0fa06", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:48", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-emailservice" - }, - "creationTimestamp": null, - "labels": { - "app": "emailservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "DISABLE_PROFILER", - "value": "1" - } - ], - "image": "gcr.io/google-samples/microservices-demo/emailservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-12T00:11:47Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:41Z", - "lastUpdateTime": "2021-10-13T00:28:08Z", - "message": "ReplicaSet \"emailservice-cc7c4cd87\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"frontend\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"frontend\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"frontend\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"},{\"name\":\"RECOMMENDATION_SERVICE_ADDR\",\"value\":\"recommendationservice:8080\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"CHECKOUT_SERVICE_ADDR\",\"value\":\"checkoutservice:5050\"},{\"name\":\"AD_SERVICE_ADDR\",\"value\":\"adservice:9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/frontend:v0.2.3\",\"livenessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-liveness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-readiness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:44Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AD_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CHECKOUT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"RECOMMENDATION_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:44Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:34Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:22Z" - } - ], - "name": "frontend", - "namespace": "hipster", - "resourceVersion": "61263336", - "uid": "86b92d9e-22ad-4f0a-be26-41343f05f0d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "frontend" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9611f05f-4a8b-48ff-9722-e6a2ec702d65", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:57", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-frontend", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "frontend", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - }, - { - "name": "RECOMMENDATION_SERVICE_ADDR", - "value": "recommendationservice:8080" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "CHECKOUT_SERVICE_ADDR", - "value": "checkoutservice:5050" - }, - { - "name": "AD_SERVICE_ADDR", - "value": "adservice:9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/frontend:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-liveness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-readiness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:04Z", - "lastUpdateTime": "2021-10-12T00:12:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:44Z", - "lastUpdateTime": "2021-10-13T00:28:23Z", - "message": "ReplicaSet \"frontend-c747f6f47\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"loadgenerator\",\"namespace\":\"hipster\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"loadgenerator\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"loadgenerator\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"FRONTEND_ADDR\",\"value\":\"frontend:80\"},{\"name\":\"USERS\",\"value\":\"10\"}],\"image\":\"gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3\",\"name\":\"main\",\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"256Mi\"}}}],\"restartPolicy\":\"Always\",\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"main\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"FRONTEND_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"USERS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:38Z" - } - ], - "name": "loadgenerator", - "namespace": "hipster", - "resourceVersion": "61263451", - "uid": "e9200650-d25d-43f2-b1bc-4615beaed50c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "loadgenerator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "baca3d0f-fdc8-42c6-a9b1-ee29b3d173e0", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:26", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-loadgenerator", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "loadgenerator", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "FRONTEND_ADDR", - "value": "frontend:80" - }, - { - "name": "USERS", - "value": "10" - } - ], - "image": "gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "name": "main", - "resources": { - "limits": { - "cpu": "500m", - "memory": "512Mi" - }, - "requests": { - "cpu": "300m", - "memory": "256Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-13T00:24:15Z", - "lastUpdateTime": "2021-10-13T00:24:15Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:28:38Z", - "message": "ReplicaSet \"loadgenerator-6dcb6ffc4f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"paymentservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"paymentservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"paymentservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:45Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:45Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:29:27Z" - } - ], - "name": "paymentservice", - "namespace": "hipster", - "resourceVersion": "61263785", - "uid": "ab21c30f-d153-4ea8-982e-e12a71745dae" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "paymentservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "60b5720d-99b5-47a0-8bc4-656b372a6d17", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:52", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-paymentservice" - }, - "creationTimestamp": null, - "labels": { - "app": "paymentservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:45Z", - "lastUpdateTime": "2021-10-13T00:29:27Z", - "message": "ReplicaSet \"paymentservice-849b876ffd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"productcatalogservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"productcatalogservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"productcatalogservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":3550}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:46Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":3550,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:57Z" - } - ], - "name": "productcatalogservice", - "namespace": "hipster", - "resourceVersion": "61263117", - "uid": "50b29b6e-0f97-43b8-9555-a53d9c0e18f9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "productcatalogservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9bb4cc06-3907-401b-919f-c2974a623068", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-productcatalogservice" - }, - "creationTimestamp": null, - "labels": { - "app": "productcatalogservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 3550, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:46Z", - "lastUpdateTime": "2021-10-13T00:27:57Z", - "message": "ReplicaSet \"productcatalogservice-586fd876d5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"recommendationservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"recommendationservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"recommendationservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"450Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"220Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:43Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:37Z" - } - ], - "name": "recommendationservice", - "namespace": "hipster", - "resourceVersion": "61263443", - "uid": "00437f28-24c4-4759-ab93-f0be948eabc9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "recommendationservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "8cace306-b3ce-4f2f-8a6f-b122873b4eee", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-recommendationservice" - }, - "creationTimestamp": null, - "labels": { - "app": "recommendationservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "450Mi" - }, - "requests": { - "cpu": "100m", - "memory": "220Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-12T00:11:50Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:43Z", - "lastUpdateTime": "2021-10-13T00:28:37Z", - "message": "ReplicaSet \"recommendationservice-54b7b7b95d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"redis-cart\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"redis-cart\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"redis-cart\"}},\"spec\":{\"containers\":[{\"image\":\"redis:alpine\",\"livenessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"name\":\"redis\",\"ports\":[{\"containerPort\":6379}],\"readinessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"resources\":{\"limits\":{\"cpu\":\"125m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"70m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/data\",\"name\":\"redis-data\"}]}],\"volumes\":[{\"emptyDir\":{},\"name\":\"redis-data\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:50Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"redis\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":6379,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/data\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"redis-data\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:38Z" - } - ], - "name": "redis-cart", - "namespace": "hipster", - "resourceVersion": "61262948", - "uid": "76b3aebb-9ec5-479e-81ae-975ccf1bc6ec" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "redis-cart" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "838a7c21-618b-4693-a13b-838a9231ca58", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-redis-cart" - }, - "creationTimestamp": null, - "labels": { - "app": "redis-cart", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "image": "redis:alpine", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "name": "redis", - "ports": [ - { - "containerPort": 6379, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "125m", - "memory": "256Mi" - }, - "requests": { - "cpu": "70m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/data", - "name": "redis-data" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "emptyDir": {}, - "name": "redis-data" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:57Z", - "lastUpdateTime": "2021-10-12T00:11:57Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-13T00:27:38Z", - "message": "ReplicaSet \"redis-cart-594778c8b9\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"shippingservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"shippingservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"shippingservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:49Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:49Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:11Z" - } - ], - "name": "shippingservice", - "namespace": "hipster", - "resourceVersion": "61262726", - "uid": "febd2fe5-0e28-448e-aabd-31904ebb82a9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "shippingservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6503b850-839c-4b73-95ab-195d27b3c10d", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:26:58", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-shippingservice" - }, - "creationTimestamp": null, - "labels": { - "app": "shippingservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:00Z", - "lastUpdateTime": "2021-10-12T00:12:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:49Z", - "lastUpdateTime": "2021-10-13T00:27:11Z", - "message": "ReplicaSet \"shippingservice-758c9b4d4b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":\"10%\",\"maxUnavailable\":0}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"kubedns\",\"prometheus.io/port\":\"10054\",\"prometheus.io/scrape\":\"true\",\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"labels\":{\"k8s-app\":\"kube-dns\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchExpressions\":[{\"key\":\"k8s-app\",\"operator\":\"In\",\"values\":[\"kube-dns\"]}]},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"--domain=cluster.local.\",\"--dns-port=10053\",\"--config-dir=/kube-dns-config\",\"--v=2\"],\"env\":[{\"name\":\"PROMETHEUS_PORT\",\"value\":\"10055\"}],\"image\":\"gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/kubedns\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"kubedns\",\"ports\":[{\"containerPort\":10053,\"name\":\"dns-local\",\"protocol\":\"UDP\"},{\"containerPort\":10053,\"name\":\"dns-tcp-local\",\"protocol\":\"TCP\"},{\"containerPort\":10055,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readiness\",\"port\":8081,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":3,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"memory\":\"210Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"70Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001},\"volumeMounts\":[{\"mountPath\":\"/kube-dns-config\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"-v=2\",\"-logtostderr\",\"-configDir=/etc/k8s/dns/dnsmasq-nanny\",\"-restartDnsmasq=true\",\"--\",\"-k\",\"--cache-size=1000\",\"--no-negcache\",\"--dns-forward-max=1500\",\"--log-facility=-\",\"--server=/cluster.local/127.0.0.1#10053\",\"--server=/in-addr.arpa/127.0.0.1#10053\",\"--server=/ip6.arpa/127.0.0.1#10053\"],\"image\":\"gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/dnsmasq\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"dnsmasq\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"150m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"capabilities\":{\"add\":[\"NET_BIND_SERVICE\",\"SETGID\"],\"drop\":[\"all\"]}},\"volumeMounts\":[{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"--v=2\",\"--logtostderr\",\"--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV\",\"--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV\"],\"image\":\"gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/metrics\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"sidecar\",\"ports\":[{\"containerPort\":10054,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001}}],\"dnsPolicy\":\"Default\",\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 4, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:scheduler.alpha.kubernetes.io/critical-pod": {}, - "f:seccomp.security.alpha.kubernetes.io/pod": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:podAntiAffinity": { - ".": {}, - "f:preferredDuringSchedulingIgnoredDuringExecution": {} - } - }, - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:capabilities": { - ".": {}, - "f:add": {}, - "f:drop": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"kubedns\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PROMETHEUS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10053,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10053,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10055,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/kube-dns-config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"sidecar\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10054,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - "f:image": {} - }, - "k:{\"name\":\"kubedns\"}": { - "f:image": {} - }, - "k:{\"name\":\"sidecar\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:06:26Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "53109905", - "uid": "cd5cca24-7cd2-4548-a5d3-d90beb79f9e8" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 2, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "10%", - "maxUnavailable": 0 - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "kubedns", - "prometheus.io/port": "10054", - "prometheus.io/scrape": "true", - "scheduler.alpha.kubernetes.io/critical-pod": "", - "seccomp.security.alpha.kubernetes.io/pod": "runtime/default" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns" - } - }, - "spec": { - "affinity": { - "podAntiAffinity": { - "preferredDuringSchedulingIgnoredDuringExecution": [ - { - "podAffinityTerm": { - "labelSelector": { - "matchExpressions": [ - { - "key": "k8s-app", - "operator": "In", - "values": [ - "kube-dns" - ] - } - ] - }, - "topologyKey": "kubernetes.io/hostname" - }, - "weight": 100 - } - ] - } - }, - "containers": [ - { - "args": [ - "--domain=cluster.local.", - "--dns-port=10053", - "--config-dir=/kube-dns-config", - "--v=2" - ], - "env": [ - { - "name": "PROMETHEUS_PORT", - "value": "10055" - } - ], - "image": "gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/kubedns", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "kubedns", - "ports": [ - { - "containerPort": 10053, - "name": "dns-local", - "protocol": "UDP" - }, - { - "containerPort": 10053, - "name": "dns-tcp-local", - "protocol": "TCP" - }, - { - "containerPort": 10055, - "name": "metrics", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/readiness", - "port": 8081, - "scheme": "HTTP" - }, - "initialDelaySeconds": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "resources": { - "limits": { - "memory": "210Mi" - }, - "requests": { - "cpu": "100m", - "memory": "70Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/kube-dns-config", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "-v=2", - "-logtostderr", - "-configDir=/etc/k8s/dns/dnsmasq-nanny", - "-restartDnsmasq=true", - "--", - "-k", - "--cache-size=1000", - "--no-negcache", - "--dns-forward-max=1500", - "--log-facility=-", - "--server=/cluster.local/127.0.0.1#10053", - "--server=/in-addr.arpa/127.0.0.1#10053", - "--server=/ip6.arpa/127.0.0.1#10053" - ], - "image": "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/dnsmasq", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "dnsmasq", - "ports": [ - { - "containerPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "150m", - "memory": "20Mi" - } - }, - "securityContext": { - "capabilities": { - "add": [ - "NET_BIND_SERVICE", - "SETGID" - ], - "drop": [ - "all" - ] - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/k8s/dns/dnsmasq-nanny", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "--v=2", - "--logtostderr", - "--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV", - "--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV" - ], - "image": "gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/metrics", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "sidecar", - "ports": [ - { - "containerPort": 10054, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns", - "serviceAccountName": "kube-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 2, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-09-11T01:57:38Z", - "message": "ReplicaSet \"kube-dns-59844ff879\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:06:26Z", - "lastUpdateTime": "2021-09-25T17:06:26Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 4, - "readyReplicas": 2, - "replicas": 2, - "updatedReplicas": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns-autoscaler\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns-autoscaler\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"spec\":{\"containers\":[{\"command\":[\"/cluster-proportional-autoscaler\",\"--namespace=kube-system\",\"--configmap=kube-dns-autoscaler\",\"--target=Deployment/kube-dns\",\"--default-params={\\\"linear\\\":{\\\"coresPerReplica\\\":256,\\\"nodesPerReplica\\\":16,\\\"preventSinglePointFailure\\\":true,\\\"includeUnschedulableNodes\\\":true}}\",\"--logtostderr=true\",\"--v=2\"],\"image\":\"gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0\",\"name\":\"autoscaler\",\"resources\":{\"requests\":{\"cpu\":\"20m\",\"memory\":\"10Mi\"}}}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"seccompProfile\":{\"type\":\"RuntimeDefault\"},\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns-autoscaler\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns-autoscaler", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"autoscaler\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:02:52Z" - } - ], - "name": "kube-dns-autoscaler", - "namespace": "kube-system", - "resourceVersion": "53108562", - "uid": "c84ce079-f3c8-46ba-871f-0f2d42ffee1e" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/cluster-proportional-autoscaler", - "--namespace=kube-system", - "--configmap=kube-dns-autoscaler", - "--target=Deployment/kube-dns", - "--default-params={\"linear\":{\"coresPerReplica\":256,\"nodesPerReplica\":16,\"preventSinglePointFailure\":true,\"includeUnschedulableNodes\":true}}", - "--logtostderr=true", - "--v=2" - ], - "image": "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "autoscaler", - "resources": { - "requests": { - "cpu": "20m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "seccompProfile": { - "type": "RuntimeDefault" - }, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns-autoscaler", - "serviceAccountName": "kube-dns-autoscaler", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:54:39Z", - "message": "ReplicaSet \"kube-dns-autoscaler-844c9d9448\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:02:52Z", - "lastUpdateTime": "2021-09-25T17:02:52Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"glbc\",\"kubernetes.io/cluster-service\":\"true\",\"kubernetes.io/name\":\"GLBC\"},\"name\":\"l7-default-backend\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"glbc\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"glbc\",\"name\":\"glbc\"}},\"spec\":{\"containers\":[{\"image\":\"k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":30,\"timeoutSeconds\":5},\"name\":\"default-http-backend\",\"ports\":[{\"containerPort\":8080}],\"resources\":{\"limits\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}}}],\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"tolerations\":[{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "glbc", - "kubernetes.io/cluster-service": "true", - "kubernetes.io/name": "GLBC" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:kubernetes.io/name": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:name": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"default-http-backend\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:seccompProfile": { - "f:type": {} - } - }, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:01:20Z" - } - ], - "name": "l7-default-backend", - "namespace": "kube-system", - "resourceVersion": "53107969", - "uid": "32a76c03-37a1-44e9-b293-dd6b46ed274b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "glbc" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "glbc", - "name": "glbc" - } - }, - "spec": { - "containers": [ - { - "image": "k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 30, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "default-http-backend", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "10m", - "memory": "20Mi" - }, - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:56:25Z", - "message": "ReplicaSet \"l7-default-backend-56cb9644f6\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:01:20Z", - "lastUpdateTime": "2021-09-25T17:01:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "24", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metrics-server\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server-v0.3.6\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server\"},\"spec\":{\"containers\":[{\"command\":[\"/metrics-server\",\"--metric-resolution=30s\",\"--kubelet-port=10255\",\"--deprecated-kubelet-completely-insecure=true\",\"--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP\"],\"image\":\"k8s.gcr.io/metrics-server-amd64:v0.3.6\",\"name\":\"metrics-server\",\"ports\":[{\"containerPort\":443,\"name\":\"https\",\"protocol\":\"TCP\"}]},{\"command\":[\"/pod_nanny\",\"--config-dir=/etc/config\",\"--cpu=40m\",\"--extra-cpu=0.5m\",\"--memory=35Mi\",\"--extra-memory=4Mi\",\"--threshold=5\",\"--deployment=metrics-server-v0.3.6\",\"--container=metrics-server\",\"--poll-period=300000\",\"--estimator=exponential\",\"--scale-down-delay=24h\",\"--minClusterSize=5\",\"--use-metrics=true\"],\"env\":[{\"name\":\"MY_POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"MY_POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"gke.gcr.io/addon-resizer:1.8.11-gke.0\",\"name\":\"metrics-server-nanny\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"5m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"metrics-server-config-volume\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"metrics-server\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"metrics-server-config\"},\"name\":\"metrics-server-config-volume\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 24, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metrics-server", - "kubernetes.io/cluster-service": "true", - "version": "v0.3.6" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:version": {} - }, - "f:name": {} - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - }, - "k:{\"name\":\"metrics-server-nanny\"}": { - ".": {}, - "f:command": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"MY_POD_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"MY_POD_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"metrics-server-config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - "f:resources": { - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - } - } - } - } - } - } - }, - "manager": "pod_nanny", - "operation": "Update", - "time": "2021-06-13T13:42:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-26T17:13:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-26T17:13:52Z" - } - ], - "name": "metrics-server-v0.3.6", - "namespace": "kube-system", - "resourceVersion": "53582788", - "uid": "872d0f34-7998-45d3-9eea-570e0a47e03c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - }, - "name": "metrics-server" - }, - "spec": { - "containers": [ - { - "command": [ - "/metrics-server", - "--metric-resolution=30s", - "--kubelet-port=10255", - "--deprecated-kubelet-completely-insecure=true", - "--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP" - ], - "image": "k8s.gcr.io/metrics-server-amd64:v0.3.6", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server", - "ports": [ - { - "containerPort": 443, - "name": "https", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "44m", - "memory": "63Mi" - }, - "requests": { - "cpu": "44m", - "memory": "63Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - }, - { - "command": [ - "/pod_nanny", - "--config-dir=/etc/config", - "--cpu=40m", - "--extra-cpu=0.5m", - "--memory=35Mi", - "--extra-memory=4Mi", - "--threshold=5", - "--deployment=metrics-server-v0.3.6", - "--container=metrics-server", - "--poll-period=300000", - "--estimator=exponential", - "--scale-down-delay=24h", - "--minClusterSize=5", - "--use-metrics=true" - ], - "env": [ - { - "name": "MY_POD_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.name" - } - } - }, - { - "name": "MY_POD_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - } - ], - "image": "gke.gcr.io/addon-resizer:1.8.11-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server-nanny", - "resources": { - "limits": { - "cpu": "100m", - "memory": "300Mi" - }, - "requests": { - "cpu": "5m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "metrics-server-config-volume" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "serviceAccount": "metrics-server", - "serviceAccountName": "metrics-server", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "metrics-server-config" - }, - "name": "metrics-server-config-volume" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-09-25T17:12:33Z", - "lastUpdateTime": "2021-09-25T17:12:33Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-06-13T13:42:20Z", - "lastUpdateTime": "2021-09-26T17:13:52Z", - "message": "ReplicaSet \"metrics-server-v0.3.6-7889654bbb\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 24, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "6", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-proxy\"},\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-proxy\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-proxy\"}},\"spec\":{\"containers\":[{\"command\":[\"/bin/sh\",\"-c\",\"kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\\u003e\\u003e/var/log/kube-proxy.log 2\\u003e\\u00261\"],\"env\":[{\"name\":\"KUBERNETES_SERVICE_HOST\",\"value\":\"34.78.97.243\"}],\"image\":\"gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001\",\"name\":\"kube-proxy\",\"resources\":{\"requests\":{\"cpu\":\"100m\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/log\",\"name\":\"varlog\",\"readOnly\":false},{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/lib/modules\",\"name\":\"lib-modules\",\"readOnly\":true}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\",\"node.kubernetes.io/kube-proxy-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"kube-proxy\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/log\"},\"name\":\"varlog\"},{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"hostPath\":{\"path\":\"/lib/modules\"},\"name\":\"lib-modules\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "generation": 6, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-proxy" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBERNETES_SERVICE_HOST\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/kube-proxy-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - "f:command": {}, - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:44Z" - } - ], - "name": "kube-proxy", - "namespace": "kube-system", - "resourceVersion": "52161714", - "uid": "bb6f9ab0-e586-407b-95c0-773637c696e8" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-proxy" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-proxy" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "env": [ - { - "name": "KUBERNETES_SERVICE_HOST", - "value": "34.78.97.243" - } - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux", - "node.kubernetes.io/kube-proxy-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "kube-proxy", - "serviceAccountName": "kube-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 6 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"},\"name\":\"metadata-proxy-v0.1\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metadata-proxy\",\"version\":\"v0.1\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"}},\"spec\":{\"containers\":[{\"args\":[\"--addr=0.0.0.0:988\"],\"image\":\"k8s.gcr.io/metadata-proxy:v0.1.12\",\"name\":\"metadata-proxy\",\"resources\":{\"limits\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"},\"requests\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"}},\"securityContext\":{\"privileged\":true}}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"cloud.google.com/metadata-proxy-ready\":\"true\",\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"metadata-proxy\",\"terminationGracePeriodSeconds\":30,\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 3, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:cloud.google.com/metadata-proxy-ready": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - "f:args": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - } - ], - "name": "metadata-proxy-v0.1", - "namespace": "kube-system", - "resourceVersion": "25934435", - "uid": "94bf5845-f77b-47d4-bcec-e78549b4d8a3" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metadata-proxy", - "version": "v0.1" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--addr=0.0.0.0:988" - ], - "image": "k8s.gcr.io/metadata-proxy:v0.1.12", - "imagePullPolicy": "IfNotPresent", - "name": "metadata-proxy", - "resources": { - "limits": { - "cpu": "30m", - "memory": "25Mi" - }, - "requests": { - "cpu": "30m", - "memory": "25Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "cloud.google.com/metadata-proxy-ready": "true", - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "metadata-proxy", - "serviceAccountName": "metadata-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 3 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"node-local-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"node-local-dns\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"nodelocaldns\",\"components.gke.io/component-version\":\"1.4.0\",\"prometheus.io/port\":\"9253\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"k8s-app\":\"node-local-dns\"}},\"spec\":{\"containers\":[{\"args\":[\"-localip\",\"169.254.20.10,10.72.0.10\",\"-conf\",\"/etc/Corefile\",\"-upstreamsvc\",\"kube-dns-upstream\",\"-kubednscm\",\"/etc/kube-dns\"],\"image\":\"gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1\",\"livenessProbe\":{\"httpGet\":{\"host\":\"169.254.20.10\",\"path\":\"/health\",\"port\":8080},\"initialDelaySeconds\":60,\"timeoutSeconds\":5},\"name\":\"node-cache\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"},{\"containerPort\":9253,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"25m\",\"memory\":\"5Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/etc/coredns\",\"name\":\"config-volume\"},{\"mountPath\":\"/etc/kube-dns\",\"name\":\"kube-dns-config\"}]}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"addon.gke.io/node-local-dns-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"node-local-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"},{\"configMap\":{\"items\":[{\"key\":\"Corefile\",\"path\":\"Corefile.base\"}],\"name\":\"node-local-dns\"},\"name\":\"config-volume\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"}}}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "node-local-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:host": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":9253,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/coredns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/kube-dns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:addon.gke.io/node-local-dns-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "53114241", - "uid": "5069e9ba-0784-41bf-9577-3757bcb3b6d6" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "node-local-dns" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "nodelocaldns", - "components.gke.io/component-version": "1.4.0", - "prometheus.io/port": "9253", - "prometheus.io/scrape": "true" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "node-local-dns" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-localip", - "169.254.20.10,10.72.0.10", - "-conf", - "/etc/Corefile", - "-upstreamsvc", - "kube-dns-upstream", - "-kubednscm", - "/etc/kube-dns" - ], - "image": "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "host": "169.254.20.10", - "path": "/health", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "node-cache", - "ports": [ - { - "containerPort": 53, - "hostPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "hostPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - }, - { - "containerPort": 9253, - "hostPort": 9253, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "25m", - "memory": "5Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/etc/coredns", - "name": "config-volume" - }, - { - "mountPath": "/etc/kube-dns", - "name": "kube-dns-config" - } - ] - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "addon.gke.io/node-local-dns-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "node-local-dns", - "serviceAccountName": "node-local-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "Corefile", - "path": "Corefile.base" - } - ], - "name": "node-local-dns" - }, - "name": "config-volume" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 2, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"nvidia-gpu-device-plugin\"},\"name\":\"nvidia-gpu-device-plugin\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"cloud.google.com/gke-accelerator\",\"operator\":\"Exists\"}]}]}}},\"containers\":[{\"command\":[\"/usr/bin/nvidia-gpu-device-plugin\",\"-logtostderr\",\"--enable-container-gpu-metrics\",\"--enable-health-monitoring\"],\"env\":[{\"name\":\"LD_LIBRARY_PATH\",\"value\":\"/usr/local/nvidia/lib64\"}],\"image\":\"gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317\",\"name\":\"nvidia-gpu-device-plugin\",\"ports\":[{\"containerPort\":2112,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/device-plugin\",\"name\":\"device-plugin\"},{\"mountPath\":\"/dev\",\"name\":\"dev\"},{\"mountPath\":\"/usr/local/nvidia\",\"name\":\"nvidia\"},{\"mountPath\":\"/var/lib/kubelet/pod-resources\",\"name\":\"pod-resources\"},{\"mountPath\":\"/proc\",\"name\":\"proc\"},{\"mountPath\":\"/etc/nvidia\",\"name\":\"nvidia-config\"}]}],\"priorityClassName\":\"system-node-critical\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/device-plugins\"},\"name\":\"device-plugin\"},{\"hostPath\":{\"path\":\"/dev\"},\"name\":\"dev\"},{\"hostPath\":{\"path\":\"/home/kubernetes/bin/nvidia\",\"type\":\"Directory\"},\"name\":\"nvidia\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/pod-resources\"},\"name\":\"pod-resources\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"proc\"},{\"hostPath\":{\"path\":\"/etc/nvidia\"},\"name\":\"nvidia-config\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:17Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "nvidia-gpu-device-plugin" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:nodeAffinity": { - ".": {}, - "f:requiredDuringSchedulingIgnoredDuringExecution": { - ".": {}, - "f:nodeSelectorTerms": {} - } - } - }, - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"LD_LIBRARY_PATH\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":2112,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/device-plugin\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/local/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet/pod-resources\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"dev\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"device-plugin\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"nvidia\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"pod-resources\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - "f:command": {}, - "f:image": {}, - "f:volumeMounts": { - "k:{\"mountPath\":\"/etc/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/proc\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:volumes": { - "k:{\"name\":\"nvidia-config\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"proc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "nvidia-gpu-device-plugin", - "namespace": "kube-system", - "resourceVersion": "25934477", - "uid": "14396a20-ecee-4671-aefe-2a5b9d2e0dde" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "spec": { - "affinity": { - "nodeAffinity": { - "requiredDuringSchedulingIgnoredDuringExecution": { - "nodeSelectorTerms": [ - { - "matchExpressions": [ - { - "key": "cloud.google.com/gke-accelerator", - "operator": "Exists" - } - ] - } - ] - } - } - }, - "containers": [ - { - "command": [ - "/usr/bin/nvidia-gpu-device-plugin", - "-logtostderr", - "--enable-container-gpu-metrics", - "--enable-health-monitoring" - ], - "env": [ - { - "name": "LD_LIBRARY_PATH", - "value": "/usr/local/nvidia/lib64" - } - ], - "image": "gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317", - "imagePullPolicy": "IfNotPresent", - "name": "nvidia-gpu-device-plugin", - "ports": [ - { - "containerPort": 2112, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "20Mi" - }, - "requests": { - "cpu": "50m", - "memory": "20Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/device-plugin", - "name": "device-plugin" - }, - { - "mountPath": "/dev", - "name": "dev" - }, - { - "mountPath": "/usr/local/nvidia", - "name": "nvidia" - }, - { - "mountPath": "/var/lib/kubelet/pod-resources", - "name": "pod-resources" - }, - { - "mountPath": "/proc", - "name": "proc" - }, - { - "mountPath": "/etc/nvidia", - "name": "nvidia-config" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/device-plugins", - "type": "" - }, - "name": "device-plugin" - }, - { - "hostPath": { - "path": "/dev", - "type": "" - }, - "name": "dev" - }, - { - "hostPath": { - "path": "/home/kubernetes/bin/nvidia", - "type": "Directory" - }, - "name": "nvidia" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/pod-resources", - "type": "" - }, - "name": "pod-resources" - }, - { - "hostPath": { - "path": "/proc", - "type": "" - }, - "name": "proc" - }, - { - "hostPath": { - "path": "/etc/nvidia", - "type": "" - }, - "name": "nvidia-config" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:02:45.009201226Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:02:48Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"6de798cc-d558-479a-8ef4-38363e434633\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.63\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:02:55Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-5naq", - "uid": "6de798cc-d558-479a-8ef4-38363e434633" - } - ], - "resourceVersion": "53108585", - "uid": "fdd66d80-d09d-4b43-a291-b3797c7a5864" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-5naq", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://50767376b8a42b7a390e84c5c451d1485b1a562873b915100dc605bbcc49c1c5", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:02:48Z" - } - } - } - ], - "hostIP": "10.132.0.63", - "phase": "Running", - "podIP": "10.132.0.63", - "podIPs": [ - { - "ip": "10.132.0.63" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:02:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:09:05.595580038Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:09:09Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"d288c56c-2a00-42fe-b2ea-b8761fec2a4e\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.193\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:09:16Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-abj3", - "uid": "d288c56c-2a00-42fe-b2ea-b8761fec2a4e" - } - ], - "resourceVersion": "53110982", - "uid": "0866b060-d7a6-40bc-9ed9-292fbce958e9" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-abj3", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b04121a3de085254493b48dbe1be551abd021877d1c098afbd19e6429df8f4ba", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:09:08Z" - } - } - } - ], - "hostIP": "10.132.15.193", - "phase": "Running", - "podIP": "10.132.15.193", - "podIPs": [ - { - "ip": "10.132.15.193" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:09:06Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:56:27.195784979Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:56:29Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"9aa58d78-0147-4564-9900-0409a6bec341\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.61\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:56:37Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-enr8", - "uid": "9aa58d78-0147-4564-9900-0409a6bec341" - } - ], - "resourceVersion": "53106105", - "uid": "b940e7b5-9e7f-4ac7-a3ee-6c6655c1e65a" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-enr8", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b9375aed4bc463ecfa5fcfb0cfb3b55d087416bfe0c3267c1395e8f93569d03c", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:56:29Z" - } - } - } - ], - "hostIP": "10.132.0.61", - "phase": "Running", - "podIP": "10.132.0.61", - "podIPs": [ - { - "ip": "10.132.0.61" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:56:28Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:59:41.285621877Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:59:44Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"c1ab3c15-9764-40f5-ba6b-82556dc98ea2\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.62\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:59:52Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-oq2w", - "uid": "c1ab3c15-9764-40f5-ba6b-82556dc98ea2" - } - ], - "resourceVersion": "53107378", - "uid": "19e52dea-6339-4ed7-8e32-3d39b242d133" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-oq2w", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://a0b27bef16953a38c48075124547583280bccf28d1d6cf54c3b3e754e2847c86", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:59:44Z" - } - } - } - ], - "hostIP": "10.132.0.62", - "phase": "Running", - "podIP": "10.132.0.62", - "podIPs": [ - { - "ip": "10.132.0.62" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:59:42Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:12:12.095932889Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:12:15Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"7042c0e8-8dc5-4d1d-8b36-92c692c31c76\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.194\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:12:22Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-rgdp", - "uid": "7042c0e8-8dc5-4d1d-8b36-92c692c31c76" - } - ], - "resourceVersion": "53112149", - "uid": "5248c280-7bde-4fe9-a74e-56ae25abb0d2" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-rgdp", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://fd91ae480585a78c59ef401dc852d58921e76693ecbd908d98e4b63da6c298ff", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:12:14Z" - } - } - } - ], - "hostIP": "10.132.15.194", - "phase": "Running", - "podIP": "10.132.15.194", - "podIPs": [ - { - "ip": "10.132.15.194" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:12:13Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:05:45.558688986Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:05:49Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"a58f61e7-9d9e-4266-90d4-16b9969cb373\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.192\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:05:56Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-x940", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-x940", - "uid": "a58f61e7-9d9e-4266-90d4-16b9969cb373" - } - ], - "resourceVersion": "53109692", - "uid": "71a05734-f741-4b7e-82fe-765c555b3607" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-x940", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://6abab671623159f7174321118f58600f8955267a139a72508e9a73631ef7920d", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:05:48Z" - } - } - } - ], - "hostIP": "10.132.15.192", - "phase": "Running", - "podIP": "10.132.15.192", - "podIPs": [ - { - "ip": "10.132.15.192" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:05:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:15:06.466708143Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:15:10Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"65f37105-dd71-428b-bf8b-0e82b88027f1\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.195\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:15:17Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-zzyg", - "uid": "65f37105-dd71-428b-bf8b-0e82b88027f1" - } - ], - "resourceVersion": "53113200", - "uid": "dac23622-ae54-4a1a-a6ca-3c020911966e" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-zzyg", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://ee309dad5cb7047fcbd7eb0401760ccb4bd986080ab11c860911e37b132a2a5c", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:15:09Z" - } - } - } - ], - "hostIP": "10.132.15.195", - "phase": "Running", - "podIP": "10.132.15.195", - "podIPs": [ - { - "ip": "10.132.15.195" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:15:07Z" - } - } - ], - "listInputKinds": null - } - ], - "remediation": "Only connect PODs to host network when it is necessary. If not, set the hostNetwork field of the pod spec to false, or completely remove it (false is the default). Whitelist only those PODs that must have access to host network by design.", - "description": "Potential attackers may gain access to a POD and inherit access to the entire host network. For example, in AWS case, they will have access to the entire VPC. This control identifies all the PODs with host network access enabled.", - "score": 71 - }, - { - "guid": "", - "attributes": { - "armoBuiltin": true - }, - "id": "C-0009", - "controlID": "C-0009", - "name": "Resource policies", - "ruleReports": [ - { - "name": "resource-policies", - "remediation": "", - "ruleStatus": { - "status": "success", - "message": "" - }, - "ruleResponses": [ - { - "alertMessage": "there are no resource limits defined for container : kube-proxy", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:02:45.009201226Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:02:48Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"6de798cc-d558-479a-8ef4-38363e434633\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.63\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:02:55Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-5naq", - "uid": "6de798cc-d558-479a-8ef4-38363e434633" - } - ], - "resourceVersion": "53108585", - "uid": "fdd66d80-d09d-4b43-a291-b3797c7a5864" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-5naq", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://50767376b8a42b7a390e84c5c451d1485b1a562873b915100dc605bbcc49c1c5", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:02:48Z" - } - } - } - ], - "hostIP": "10.132.0.63", - "phase": "Running", - "podIP": "10.132.0.63", - "podIPs": [ - { - "ip": "10.132.0.63" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:02:46Z" - } - } - ] - }, - "exception": { - "guid": "e6f16662-b2ec-497d-a2bf-beee06ddb255", - "name": "exception_C-0009_kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq_ec0fce813332f4c38cd7b72295d93fd7", - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-10T16:08:35.630817", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "kind": "Pod", - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq", - "namespace": "kube-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Resource policies", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "there are no resource limits defined for container : kube-proxy", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:09:05.595580038Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:09:09Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"d288c56c-2a00-42fe-b2ea-b8761fec2a4e\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.193\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:09:16Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-abj3", - "uid": "d288c56c-2a00-42fe-b2ea-b8761fec2a4e" - } - ], - "resourceVersion": "53110982", - "uid": "0866b060-d7a6-40bc-9ed9-292fbce958e9" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-abj3", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b04121a3de085254493b48dbe1be551abd021877d1c098afbd19e6429df8f4ba", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:09:08Z" - } - } - } - ], - "hostIP": "10.132.15.193", - "phase": "Running", - "podIP": "10.132.15.193", - "podIPs": [ - { - "ip": "10.132.15.193" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:09:06Z" - } - } - ] - }, - "exception": { - "guid": "2f1fd6d3-2f4f-4202-b6f9-8daa87cd0337", - "name": "exception_C-0009_kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3_9777b60ffa4cb9ed543e6f763d172aa0", - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-10T16:08:39.527075", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "kind": "Pod", - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3", - "namespace": "kube-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Resource policies", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "there are no resource limits defined for container : kube-proxy", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:56:27.195784979Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:56:29Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"9aa58d78-0147-4564-9900-0409a6bec341\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.61\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:56:37Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-enr8", - "uid": "9aa58d78-0147-4564-9900-0409a6bec341" - } - ], - "resourceVersion": "53106105", - "uid": "b940e7b5-9e7f-4ac7-a3ee-6c6655c1e65a" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-enr8", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b9375aed4bc463ecfa5fcfb0cfb3b55d087416bfe0c3267c1395e8f93569d03c", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:56:29Z" - } - } - } - ], - "hostIP": "10.132.0.61", - "phase": "Running", - "podIP": "10.132.0.61", - "podIPs": [ - { - "ip": "10.132.0.61" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:56:28Z" - } - } - ] - }, - "exception": { - "guid": "1e6e8dc5-09fe-4927-a883-1333224448f3", - "name": "exception_C-0009_kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8_d554bfefa281695bc21f6b2bf7ff538b", - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-10T16:08:38.126908", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "kind": "Pod", - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8", - "namespace": "kube-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Resource policies", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "there are no resource limits defined for container : kube-proxy", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:59:41.285621877Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:59:44Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"c1ab3c15-9764-40f5-ba6b-82556dc98ea2\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.62\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:59:52Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-oq2w", - "uid": "c1ab3c15-9764-40f5-ba6b-82556dc98ea2" - } - ], - "resourceVersion": "53107378", - "uid": "19e52dea-6339-4ed7-8e32-3d39b242d133" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-oq2w", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://a0b27bef16953a38c48075124547583280bccf28d1d6cf54c3b3e754e2847c86", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:59:44Z" - } - } - } - ], - "hostIP": "10.132.0.62", - "phase": "Running", - "podIP": "10.132.0.62", - "podIPs": [ - { - "ip": "10.132.0.62" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:59:42Z" - } - } - ] - }, - "exception": { - "guid": "f678c45f-8dd0-46b0-9aa0-c478182af2c8", - "name": "exception_C-0009_kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w_91c88c92ee806fdc5cc189c867c2f471", - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-10T16:08:36.747839", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "kind": "Pod", - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w", - "namespace": "kube-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Resource policies", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "there are no resource limits defined for container : kube-proxy", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:12:12.095932889Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:12:15Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"7042c0e8-8dc5-4d1d-8b36-92c692c31c76\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.194\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:12:22Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-rgdp", - "uid": "7042c0e8-8dc5-4d1d-8b36-92c692c31c76" - } - ], - "resourceVersion": "53112149", - "uid": "5248c280-7bde-4fe9-a74e-56ae25abb0d2" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-rgdp", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://fd91ae480585a78c59ef401dc852d58921e76693ecbd908d98e4b63da6c298ff", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:12:14Z" - } - } - } - ], - "hostIP": "10.132.15.194", - "phase": "Running", - "podIP": "10.132.15.194", - "podIPs": [ - { - "ip": "10.132.15.194" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:12:13Z" - } - } - ] - }, - "exception": { - "guid": "7870fad4-30c2-4f45-82b5-17c02a00133c", - "name": "exception_C-0009_kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp_efea147314d7a2ccb1191d663c6020e9", - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-10T16:08:44.458776", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "kind": "Pod", - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp", - "namespace": "kube-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Resource policies", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "there are no resource limits defined for container : kube-proxy", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:05:45.558688986Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:05:49Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"a58f61e7-9d9e-4266-90d4-16b9969cb373\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.192\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:05:56Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-x940", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-x940", - "uid": "a58f61e7-9d9e-4266-90d4-16b9969cb373" - } - ], - "resourceVersion": "53109692", - "uid": "71a05734-f741-4b7e-82fe-765c555b3607" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-x940", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://6abab671623159f7174321118f58600f8955267a139a72508e9a73631ef7920d", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:05:48Z" - } - } - } - ], - "hostIP": "10.132.15.192", - "phase": "Running", - "podIP": "10.132.15.192", - "podIPs": [ - { - "ip": "10.132.15.192" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:05:46Z" - } - } - ] - }, - "exception": { - "guid": "31aba989-3ef6-4419-af5a-46083fbedb08", - "name": "exception_C-0009_kube-proxy-gke-leonid-cluster-default-pool-98608036-x940_6369e927f9781a9f6f9951d5d5e81931", - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-10T16:08:42.892022", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "kind": "Pod", - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-x940", - "namespace": "kube-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Resource policies", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "there are no resource limits defined for container : kube-proxy", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:15:06.466708143Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:15:10Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"65f37105-dd71-428b-bf8b-0e82b88027f1\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.195\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:15:17Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-zzyg", - "uid": "65f37105-dd71-428b-bf8b-0e82b88027f1" - } - ], - "resourceVersion": "53113200", - "uid": "dac23622-ae54-4a1a-a6ca-3c020911966e" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-zzyg", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://ee309dad5cb7047fcbd7eb0401760ccb4bd986080ab11c860911e37b132a2a5c", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:15:09Z" - } - } - } - ], - "hostIP": "10.132.15.195", - "phase": "Running", - "podIP": "10.132.15.195", - "podIPs": [ - { - "ip": "10.132.15.195" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:15:07Z" - } - } - ] - }, - "exception": { - "guid": "20b4a35e-e56f-4f39-b317-87b4c48a1080", - "name": "exception_C-0009_kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg_69778e16c48d738db9ce2c9230eb5f88", - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-10T16:08:34.279989", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "kind": "Pod", - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg", - "namespace": "kube-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Resource policies", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "there are no resource limits defined for container : dnsmasq", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":\"10%\",\"maxUnavailable\":0}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"kubedns\",\"prometheus.io/port\":\"10054\",\"prometheus.io/scrape\":\"true\",\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"labels\":{\"k8s-app\":\"kube-dns\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchExpressions\":[{\"key\":\"k8s-app\",\"operator\":\"In\",\"values\":[\"kube-dns\"]}]},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"--domain=cluster.local.\",\"--dns-port=10053\",\"--config-dir=/kube-dns-config\",\"--v=2\"],\"env\":[{\"name\":\"PROMETHEUS_PORT\",\"value\":\"10055\"}],\"image\":\"gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/kubedns\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"kubedns\",\"ports\":[{\"containerPort\":10053,\"name\":\"dns-local\",\"protocol\":\"UDP\"},{\"containerPort\":10053,\"name\":\"dns-tcp-local\",\"protocol\":\"TCP\"},{\"containerPort\":10055,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readiness\",\"port\":8081,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":3,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"memory\":\"210Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"70Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001},\"volumeMounts\":[{\"mountPath\":\"/kube-dns-config\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"-v=2\",\"-logtostderr\",\"-configDir=/etc/k8s/dns/dnsmasq-nanny\",\"-restartDnsmasq=true\",\"--\",\"-k\",\"--cache-size=1000\",\"--no-negcache\",\"--dns-forward-max=1500\",\"--log-facility=-\",\"--server=/cluster.local/127.0.0.1#10053\",\"--server=/in-addr.arpa/127.0.0.1#10053\",\"--server=/ip6.arpa/127.0.0.1#10053\"],\"image\":\"gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/dnsmasq\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"dnsmasq\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"150m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"capabilities\":{\"add\":[\"NET_BIND_SERVICE\",\"SETGID\"],\"drop\":[\"all\"]}},\"volumeMounts\":[{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"--v=2\",\"--logtostderr\",\"--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV\",\"--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV\"],\"image\":\"gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/metrics\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"sidecar\",\"ports\":[{\"containerPort\":10054,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001}}],\"dnsPolicy\":\"Default\",\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 4, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:scheduler.alpha.kubernetes.io/critical-pod": {}, - "f:seccomp.security.alpha.kubernetes.io/pod": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:podAntiAffinity": { - ".": {}, - "f:preferredDuringSchedulingIgnoredDuringExecution": {} - } - }, - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:capabilities": { - ".": {}, - "f:add": {}, - "f:drop": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"kubedns\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PROMETHEUS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10053,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10053,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10055,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/kube-dns-config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"sidecar\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10054,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - "f:image": {} - }, - "k:{\"name\":\"kubedns\"}": { - "f:image": {} - }, - "k:{\"name\":\"sidecar\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:06:26Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "53109905", - "uid": "cd5cca24-7cd2-4548-a5d3-d90beb79f9e8" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 2, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "10%", - "maxUnavailable": 0 - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "kubedns", - "prometheus.io/port": "10054", - "prometheus.io/scrape": "true", - "scheduler.alpha.kubernetes.io/critical-pod": "", - "seccomp.security.alpha.kubernetes.io/pod": "runtime/default" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns" - } - }, - "spec": { - "affinity": { - "podAntiAffinity": { - "preferredDuringSchedulingIgnoredDuringExecution": [ - { - "podAffinityTerm": { - "labelSelector": { - "matchExpressions": [ - { - "key": "k8s-app", - "operator": "In", - "values": [ - "kube-dns" - ] - } - ] - }, - "topologyKey": "kubernetes.io/hostname" - }, - "weight": 100 - } - ] - } - }, - "containers": [ - { - "args": [ - "--domain=cluster.local.", - "--dns-port=10053", - "--config-dir=/kube-dns-config", - "--v=2" - ], - "env": [ - { - "name": "PROMETHEUS_PORT", - "value": "10055" - } - ], - "image": "gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/kubedns", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "kubedns", - "ports": [ - { - "containerPort": 10053, - "name": "dns-local", - "protocol": "UDP" - }, - { - "containerPort": 10053, - "name": "dns-tcp-local", - "protocol": "TCP" - }, - { - "containerPort": 10055, - "name": "metrics", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/readiness", - "port": 8081, - "scheme": "HTTP" - }, - "initialDelaySeconds": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "resources": { - "limits": { - "memory": "210Mi" - }, - "requests": { - "cpu": "100m", - "memory": "70Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/kube-dns-config", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "-v=2", - "-logtostderr", - "-configDir=/etc/k8s/dns/dnsmasq-nanny", - "-restartDnsmasq=true", - "--", - "-k", - "--cache-size=1000", - "--no-negcache", - "--dns-forward-max=1500", - "--log-facility=-", - "--server=/cluster.local/127.0.0.1#10053", - "--server=/in-addr.arpa/127.0.0.1#10053", - "--server=/ip6.arpa/127.0.0.1#10053" - ], - "image": "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/dnsmasq", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "dnsmasq", - "ports": [ - { - "containerPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "150m", - "memory": "20Mi" - } - }, - "securityContext": { - "capabilities": { - "add": [ - "NET_BIND_SERVICE", - "SETGID" - ], - "drop": [ - "all" - ] - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/k8s/dns/dnsmasq-nanny", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "--v=2", - "--logtostderr", - "--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV", - "--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV" - ], - "image": "gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/metrics", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "sidecar", - "ports": [ - { - "containerPort": 10054, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns", - "serviceAccountName": "kube-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 2, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-09-11T01:57:38Z", - "message": "ReplicaSet \"kube-dns-59844ff879\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:06:26Z", - "lastUpdateTime": "2021-09-25T17:06:26Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 4, - "readyReplicas": 2, - "replicas": 2, - "updatedReplicas": 2 - } - } - ] - }, - "exception": { - "guid": "2161b1f5-0510-4363-83e1-3c5873ddf8d0", - "name": "exception_C-0009_kube-dns_1f91d7c1a421ba751d43e1ab31c19271", - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-10T16:08:32.956637", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "kind": "Deployment", - "name": "kube-dns", - "namespace": "kube-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Resource policies", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "there are no resource limits defined for container : gce-pd-driver", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - } - ] - }, - "exception": { - "guid": "bbd8ea00-4555-4431-a1f7-ac58afd798a1", - "name": "exception_C-0009_pdcsi-node-windows_0993f4e0dec91544e5b770ece8e16dfd", - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-10T16:08:38.877516", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "kind": "DaemonSet", - "name": "pdcsi-node-windows", - "namespace": "kube-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Resource policies", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "there are no resource limits defined for container : autoscaler", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns-autoscaler\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns-autoscaler\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"spec\":{\"containers\":[{\"command\":[\"/cluster-proportional-autoscaler\",\"--namespace=kube-system\",\"--configmap=kube-dns-autoscaler\",\"--target=Deployment/kube-dns\",\"--default-params={\\\"linear\\\":{\\\"coresPerReplica\\\":256,\\\"nodesPerReplica\\\":16,\\\"preventSinglePointFailure\\\":true,\\\"includeUnschedulableNodes\\\":true}}\",\"--logtostderr=true\",\"--v=2\"],\"image\":\"gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0\",\"name\":\"autoscaler\",\"resources\":{\"requests\":{\"cpu\":\"20m\",\"memory\":\"10Mi\"}}}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"seccompProfile\":{\"type\":\"RuntimeDefault\"},\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns-autoscaler\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns-autoscaler", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"autoscaler\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:02:52Z" - } - ], - "name": "kube-dns-autoscaler", - "namespace": "kube-system", - "resourceVersion": "53108562", - "uid": "c84ce079-f3c8-46ba-871f-0f2d42ffee1e" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/cluster-proportional-autoscaler", - "--namespace=kube-system", - "--configmap=kube-dns-autoscaler", - "--target=Deployment/kube-dns", - "--default-params={\"linear\":{\"coresPerReplica\":256,\"nodesPerReplica\":16,\"preventSinglePointFailure\":true,\"includeUnschedulableNodes\":true}}", - "--logtostderr=true", - "--v=2" - ], - "image": "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "autoscaler", - "resources": { - "requests": { - "cpu": "20m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "seccompProfile": { - "type": "RuntimeDefault" - }, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns-autoscaler", - "serviceAccountName": "kube-dns-autoscaler", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:54:39Z", - "message": "ReplicaSet \"kube-dns-autoscaler-844c9d9448\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:02:52Z", - "lastUpdateTime": "2021-09-25T17:02:52Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - }, - "exception": { - "guid": "bfc38a35-6da3-4d1c-b7da-18e11c15b0f4", - "name": "exception_C-0009_kube-dns-autoscaler_bd0eec3910a6aeb0f1599a7566284347", - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-10T16:08:40.092940", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "kind": "Deployment", - "name": "kube-dns-autoscaler", - "namespace": "kube-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Resource policies", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "there are no resource limits defined for container : kube-proxy", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "6", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-proxy\"},\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-proxy\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-proxy\"}},\"spec\":{\"containers\":[{\"command\":[\"/bin/sh\",\"-c\",\"kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\\u003e\\u003e/var/log/kube-proxy.log 2\\u003e\\u00261\"],\"env\":[{\"name\":\"KUBERNETES_SERVICE_HOST\",\"value\":\"34.78.97.243\"}],\"image\":\"gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001\",\"name\":\"kube-proxy\",\"resources\":{\"requests\":{\"cpu\":\"100m\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/log\",\"name\":\"varlog\",\"readOnly\":false},{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/lib/modules\",\"name\":\"lib-modules\",\"readOnly\":true}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\",\"node.kubernetes.io/kube-proxy-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"kube-proxy\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/log\"},\"name\":\"varlog\"},{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"hostPath\":{\"path\":\"/lib/modules\"},\"name\":\"lib-modules\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "generation": 6, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-proxy" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBERNETES_SERVICE_HOST\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/kube-proxy-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - "f:command": {}, - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:44Z" - } - ], - "name": "kube-proxy", - "namespace": "kube-system", - "resourceVersion": "52161714", - "uid": "bb6f9ab0-e586-407b-95c0-773637c696e8" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-proxy" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-proxy" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "env": [ - { - "name": "KUBERNETES_SERVICE_HOST", - "value": "34.78.97.243" - } - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux", - "node.kubernetes.io/kube-proxy-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "kube-proxy", - "serviceAccountName": "kube-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 6 - } - } - ] - }, - "exception": { - "guid": "6a290f7a-ead6-4a44-89eb-8a847deaf7fa", - "name": "exception_C-0009_kube-proxy_d20777f267de32936584e46d5543c335", - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-10T16:08:41.065557", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "kind": "DaemonSet", - "name": "kube-proxy", - "namespace": "kube-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Resource policies", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "there are no resource limits defined for container : node-cache", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"node-local-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"node-local-dns\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"nodelocaldns\",\"components.gke.io/component-version\":\"1.4.0\",\"prometheus.io/port\":\"9253\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"k8s-app\":\"node-local-dns\"}},\"spec\":{\"containers\":[{\"args\":[\"-localip\",\"169.254.20.10,10.72.0.10\",\"-conf\",\"/etc/Corefile\",\"-upstreamsvc\",\"kube-dns-upstream\",\"-kubednscm\",\"/etc/kube-dns\"],\"image\":\"gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1\",\"livenessProbe\":{\"httpGet\":{\"host\":\"169.254.20.10\",\"path\":\"/health\",\"port\":8080},\"initialDelaySeconds\":60,\"timeoutSeconds\":5},\"name\":\"node-cache\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"},{\"containerPort\":9253,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"25m\",\"memory\":\"5Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/etc/coredns\",\"name\":\"config-volume\"},{\"mountPath\":\"/etc/kube-dns\",\"name\":\"kube-dns-config\"}]}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"addon.gke.io/node-local-dns-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"node-local-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"},{\"configMap\":{\"items\":[{\"key\":\"Corefile\",\"path\":\"Corefile.base\"}],\"name\":\"node-local-dns\"},\"name\":\"config-volume\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"}}}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "node-local-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:host": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":9253,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/coredns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/kube-dns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:addon.gke.io/node-local-dns-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "53114241", - "uid": "5069e9ba-0784-41bf-9577-3757bcb3b6d6" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "node-local-dns" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "nodelocaldns", - "components.gke.io/component-version": "1.4.0", - "prometheus.io/port": "9253", - "prometheus.io/scrape": "true" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "node-local-dns" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-localip", - "169.254.20.10,10.72.0.10", - "-conf", - "/etc/Corefile", - "-upstreamsvc", - "kube-dns-upstream", - "-kubednscm", - "/etc/kube-dns" - ], - "image": "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "host": "169.254.20.10", - "path": "/health", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "node-cache", - "ports": [ - { - "containerPort": 53, - "hostPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "hostPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - }, - { - "containerPort": 9253, - "hostPort": 9253, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "25m", - "memory": "5Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/etc/coredns", - "name": "config-volume" - }, - { - "mountPath": "/etc/kube-dns", - "name": "kube-dns-config" - } - ] - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "addon.gke.io/node-local-dns-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "node-local-dns", - "serviceAccountName": "node-local-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "Corefile", - "path": "Corefile.base" - } - ], - "name": "node-local-dns" - }, - "name": "config-volume" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 2, - "updatedNumberScheduled": 7 - } - } - ] - }, - "exception": { - "guid": "bfc61f4f-8985-4c03-92f1-41de6a84f645", - "name": "exception_C-0009_node-local-dns_955c80507720f32beca51371eea395e1", - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-10T16:08:36.216570", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "kind": "DaemonSet", - "name": "node-local-dns", - "namespace": "kube-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Resource policies", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "there are no resource limits defined for container : csi-driver-registrar", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - } - ] - }, - "exception": { - "guid": "6251a56a-0a2f-46fb-b843-7ccb2a83855d", - "name": "exception_C-0009_pdcsi-node_fcde1b28978fc997d721f2414a1eaea9", - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-10T16:08:33.671672", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "kind": "DaemonSet", - "name": "pdcsi-node", - "namespace": "kube-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Resource policies", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "there are no resource limits defined for container : csi-driver-registrar", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - } - ] - }, - "exception": { - "guid": "bbd8ea00-4555-4431-a1f7-ac58afd798a1", - "name": "exception_C-0009_pdcsi-node-windows_0993f4e0dec91544e5b770ece8e16dfd", - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-10T16:08:38.877516", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "kind": "DaemonSet", - "name": "pdcsi-node-windows", - "namespace": "kube-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Resource policies", - "ruleName": "" - } - ] - } - } - ], - "listInputResources": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-audit\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-audit\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CONFIG_FILES\",\"value\":\"/config/config.json\"},{\"name\":\"CA_SERVER_TYPE\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"cluster_kind\",\"name\":\"ca-audit\"}}}],\"image\":\"quay.io/armosec/k8s-ca-auditlog-ubi:21\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-audit\",\"ports\":[{\"containerPort\":443,\"name\":\"ca-audit-port\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/config\",\"name\":\"ca-audit\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-audit\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"config\",\"path\":\"config.json\"}],\"name\":\"ca-audit\"},\"name\":\"ca-audit\"},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:54Z", - "generation": 1, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CONFIG_FILES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_SERVER_TYPE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:54Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-audit", - "namespace": "cyberarmor-system", - "resourceVersion": "60787209", - "uid": "687f52ea-6956-4e8a-bb8c-7ea35a04b3f0" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-audit" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CONFIG_FILES", - "value": "/config/config.json" - }, - { - "name": "CA_SERVER_TYPE", - "valueFrom": { - "configMapKeyRef": { - "key": "cluster_kind", - "name": "ca-audit" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-auditlog-ubi:21", - "imagePullPolicy": "Always", - "name": "ca-audit", - "ports": [ - { - "containerPort": 443, - "name": "ca-audit-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/config", - "name": "ca-audit", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-audit", - "serviceAccountName": "ca-audit", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "config", - "path": "config.json" - } - ], - "name": "ca-audit" - }, - "name": "ca-audit" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:54Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-audit-c667df747\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-dashboard-aggregator\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-dashboard-aggregator\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-configtype=1\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-dashboard-aggregator\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"40Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:55Z", - "generation": 1, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-dashboard-aggregator\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:55Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T23:55:20Z" - } - ], - "name": "ca-dashboard-aggregator", - "namespace": "cyberarmor-system", - "resourceVersion": "61250607", - "uid": "0ba23569-e254-4388-b22f-30cc1eca031b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-dashboard-aggregator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-configtype=1", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173", - "imagePullPolicy": "Always", - "name": "ca-dashboard-aggregator", - "resources": { - "limits": { - "cpu": "200m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "40Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:18:55Z", - "lastUpdateTime": "2021-10-12T00:19:19Z", - "message": "ReplicaSet \"ca-dashboard-aggregator-5b8bdbc8f5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-12T23:55:20Z", - "lastUpdateTime": "2021-10-12T23:55:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-notification-server\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-notification-server\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"maserNotificationServer\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\",\"value\":\"customerGUID\"},{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\",\"value\":\"8001\"},{\"name\":\"CA_NOTIFICATION_SERVER_PORT\",\"value\":\"8002\"}],\"image\":\"quay.io/armosec/notification-server-ubi:89\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-notification-server\",\"ports\":[{\"containerPort\":8001,\"name\":\"websocket\"},{\"containerPort\":8002,\"name\":\"rest-api\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:59Z", - "generation": 1, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-notification-server\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8001,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:59Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:11Z" - } - ], - "name": "ca-notification-server", - "namespace": "cyberarmor-system", - "resourceVersion": "60787036", - "uid": "8c3dc6fe-e730-4364-8445-dc5a05ad2b0f" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-notification-server" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_HOST", - "valueFrom": { - "configMapKeyRef": { - "key": "maserNotificationServer", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_ATTRIBUTES", - "value": "customerGUID" - }, - { - "name": "CA_NOTIFICATION_SERVER_WS_PORT", - "value": "8001" - }, - { - "name": "CA_NOTIFICATION_SERVER_PORT", - "value": "8002" - } - ], - "image": "quay.io/armosec/notification-server-ubi:89", - "imagePullPolicy": "Always", - "name": "ca-notification-server", - "ports": [ - { - "containerPort": 8001, - "name": "websocket", - "protocol": "TCP" - }, - { - "containerPort": 8002, - "name": "rest-api", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "50Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:11Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:59Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "ReplicaSet \"ca-notification-server-6fd966c875\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-ocimage\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-ocimage\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-ocimage:63\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-ocimage\",\"ports\":[{\"containerPort\":8080,\"name\":\"ca-ocimage-port\"}],\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:51Z", - "generation": 1, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-ocimage\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:04Z" - } - ], - "name": "ca-ocimage", - "namespace": "cyberarmor-system", - "resourceVersion": "60786986", - "uid": "a6d37edf-b144-4677-91b3-73c73d9c7df6" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-ocimage" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-ocimage:63", - "imagePullPolicy": "Always", - "name": "ca-ocimage", - "ports": [ - { - "containerPort": 8080, - "name": "ca-ocimage-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "1", - "memory": "1000Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:04Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:51Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "ReplicaSet \"ca-ocimage-5576ff7d7d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-oracle\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-oracle\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_ORACLE_PORT\",\"value\":\"4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8002\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-oracle-ubi:11\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-oracle\",\"ports\":[{\"containerPort\":4000,\"name\":\"ca-oracle\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:19:01Z", - "generation": 1, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-oracle\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:19:01Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-oracle", - "namespace": "cyberarmor-system", - "resourceVersion": "60787203", - "uid": "da3dd21c-bf13-4d2a-97da-ca80b94d08d3" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-oracle" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_ORACLE_PORT", - "value": "4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8002" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-oracle-ubi:11", - "imagePullPolicy": "Always", - "name": "ca-oracle", - "ports": [ - { - "containerPort": 4000, - "name": "ca-oracle", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:19:01Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-oracle-6c98c6bdbf\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-posture\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-posture\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8001\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-posture-ubi:112\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-posture\",\"ports\":[{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/resources/config\",\"name\":\"ca-posture-score-config\",\"readOnly\":false},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"},{\"configMap\":{\"items\":[{\"key\":\"resourcesdict.json\",\"path\":\"resourcesdict.json\"},{\"key\":\"frameworkdict.json\",\"path\":\"frameworkdict.json\"}],\"name\":\"ca-posture-score-config\"},\"name\":\"ca-posture-score-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:58Z", - "generation": 1, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-posture\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/resources/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-posture-score-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:58Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:45Z" - } - ], - "name": "ca-posture", - "namespace": "cyberarmor-system", - "resourceVersion": "60787259", - "uid": "f41f4dc1-cfb0-4201-bca7-f1cf0b72b6b7" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-posture" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8001" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-posture-ubi:112", - "imagePullPolicy": "Always", - "name": "ca-posture", - "ports": [ - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "500m", - "memory": "100Mi" - }, - "requests": { - "cpu": "100m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/resources/config", - "name": "ca-posture-score-config" - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "resourcesdict.json", - "path": "resourcesdict.json" - }, - { - "key": "frameworkdict.json", - "path": "frameworkdict.json" - } - ], - "name": "ca-posture-score-config" - }, - "name": "ca-posture-score-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:45Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:58Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "ReplicaSet \"ca-posture-5996968d7b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-rbac\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-rbac\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"S3_BUCKET\",\"value\":\"ca-kubernetes-rbac-db-dev\"},{\"name\":\"AWS_REGION\",\"value\":\"eu-west-1\"},{\"name\":\"AWS_ACCESS_KEY_ID\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keyid\",\"name\":\"ca-rbac\"}}},{\"name\":\"AWS_SECRET_ACCESS_KEY\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keysecret\",\"name\":\"ca-rbac\"}}}],\"image\":\"quay.io/armosec/k8s-ca-rbac-scanner-ubi:20\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-rbac\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"400Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:50Z", - "generation": 1, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-rbac\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AWS_ACCESS_KEY_ID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"AWS_REGION\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"AWS_SECRET_ACCESS_KEY\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"S3_BUCKET\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:13Z" - } - ], - "name": "ca-rbac", - "namespace": "cyberarmor-system", - "resourceVersion": "60787051", - "uid": "d5898a09-2489-4254-b210-0725ddb2427a" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-rbac" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "S3_BUCKET", - "value": "ca-kubernetes-rbac-db-dev" - }, - { - "name": "AWS_REGION", - "value": "eu-west-1" - }, - { - "name": "AWS_ACCESS_KEY_ID", - "valueFrom": { - "secretKeyRef": { - "key": "keyid", - "name": "ca-rbac" - } - } - }, - { - "name": "AWS_SECRET_ACCESS_KEY", - "valueFrom": { - "secretKeyRef": { - "key": "keysecret", - "name": "ca-rbac" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-rbac-scanner-ubi:20", - "imagePullPolicy": "Always", - "name": "ca-rbac", - "resources": { - "limits": { - "cpu": "200m", - "memory": "400Mi" - }, - "requests": { - "cpu": "10m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:13Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:50Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "ReplicaSet \"ca-rbac-75c8cfd6b4\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-vuln-scan\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-vuln-scan\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"EVENT_RECEIVER_URL\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\",\"value\":\"4\"}],\"image\":\"quay.io/armosec/k8s-ca-vuln-scan-ubi:84\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-vuln-scan\",\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1.5Gi\"},\"requests\":{\"cpu\":\"500m\",\"memory\":\"1Gi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:47Z", - "generation": 1, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-vuln-scan\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EVENT_RECEIVER_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:00Z" - } - ], - "name": "ca-vuln-scan", - "namespace": "cyberarmor-system", - "resourceVersion": "60786938", - "uid": "9ea3d6cb-c6c0-423f-aab2-630827939285" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-vuln-scan" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "EVENT_RECEIVER_URL", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_MAX_VULN_SCAN_ROUTINS", - "value": "4" - } - ], - "image": "quay.io/armosec/k8s-ca-vuln-scan-ubi:84", - "imagePullPolicy": "Always", - "name": "ca-vuln-scan", - "resources": { - "limits": { - "cpu": "1", - "memory": "1536Mi" - }, - "requests": { - "cpu": "500m", - "memory": "1Gi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:00Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:47Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "ReplicaSet \"ca-vuln-scan-75b499df8c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-webhook\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-webhook\"}},\"template\":{\"metadata\":{\"annotations\":{\"certificate\":\"d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt\"},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-tlsCertFile=/etc/webhook/certs/tls.crt\",\"-tlsKeyFile=/etc/webhook/certs/tls.key\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_WEBHOOK_NAME\",\"value\":\"ca-webhook\"},{\"name\":\"CA_WEBHOOK_PORT\",\"value\":\"443\"},{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_LOGIN_SECRET_NAME\",\"value\":\"ca-login\"},{\"name\":\"CA_ORACLE_SERVER\",\"value\":\"http://ca-oracle:4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"http://ca-notification-server:8001\"},{\"name\":\"CA_OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-webhook-ubi:606\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-webhook\",\"ports\":[{\"containerPort\":443,\"name\":\"mutating-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"600Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"100Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/cazips\",\"name\":\"zip-download\"},{\"mountPath\":\"/etc/webhook/certs\",\"name\":\"ca-cluster-certificate\",\"readOnly\":true},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"emptyDir\":{},\"name\":\"zip-download\"},{\"name\":\"ca-cluster-certificate\",\"secret\":{\"secretName\":\"ca-cluster-certificate\"}},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:46Z", - "generation": 1, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:certificate": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-webhook\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_LOGIN_SECRET_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/cazips\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/webhook/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-cluster-certificate\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"zip-download\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:16Z" - } - ], - "name": "ca-webhook", - "namespace": "cyberarmor-system", - "resourceVersion": "60787072", - "uid": "c968fe90-8480-471f-bdf1-fa98447ce1d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-webhook" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "certificate": "d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt" - }, - "creationTimestamp": null, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-tlsCertFile=/etc/webhook/certs/tls.crt", - "-tlsKeyFile=/etc/webhook/certs/tls.key", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_WEBHOOK_NAME", - "value": "ca-webhook" - }, - { - "name": "CA_WEBHOOK_PORT", - "value": "443" - }, - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_LOGIN_SECRET_NAME", - "value": "ca-login" - }, - { - "name": "CA_ORACLE_SERVER", - "value": "http://ca-oracle:4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "http://ca-notification-server:8001" - }, - { - "name": "CA_OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-webhook-ubi:606", - "imagePullPolicy": "Always", - "name": "ca-webhook", - "ports": [ - { - "containerPort": 443, - "name": "mutating-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "600Mi" - }, - "requests": { - "cpu": "300m", - "memory": "100Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/cazips", - "name": "zip-download" - }, - { - "mountPath": "/etc/webhook/certs", - "name": "ca-cluster-certificate", - "readOnly": true - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "emptyDir": {}, - "name": "zip-download" - }, - { - "name": "ca-cluster-certificate", - "secret": { - "defaultMode": 420, - "secretName": "ca-cluster-certificate" - } - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:16Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:46Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "ReplicaSet \"ca-webhook-7dd8bbd798\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-websocket\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-websocket\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_VULN_SCAN_SCHEDULE\",\"value\":\"@every 11h\"},{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\",\"value\":\"@every 12h\"},{\"name\":\"CA_DEBUG_SIGNER\",\"value\":null}],\"image\":\"quay.io/armosec/k8s-ca-websocket-ubi:406\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-websocket\",\"ports\":[{\"containerPort\":4002,\"name\":\"trigger-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:43Z", - "generation": 1, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-websocket\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_DEBUG_SIGNER\"}": { - ".": {}, - "f:name": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_VULN_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:14Z" - } - ], - "name": "ca-websocket", - "namespace": "cyberarmor-system", - "resourceVersion": "60787065", - "uid": "914f30e9-d858-4945-9314-cbd3422ebaab" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-websocket" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_VULN_SCAN_SCHEDULE", - "value": "@every 11h" - }, - { - "name": "CA_POSTURE_SCAN_SCHEDULE", - "value": "@every 12h" - }, - { - "name": "CA_DEBUG_SIGNER" - } - ], - "image": "quay.io/armosec/k8s-ca-websocket-ubi:406", - "imagePullPolicy": "Always", - "name": "ca-websocket", - "ports": [ - { - "containerPort": 4002, - "name": "trigger-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "1000Mi" - }, - "requests": { - "cpu": "300m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:14Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:43Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "ReplicaSet \"ca-websocket-857758846f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"adservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"adservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"adservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/adservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"name\":\"server\",\"ports\":[{\"containerPort\":9555}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"180Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:51Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":9555,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:12Z" - } - ], - "name": "adservice", - "namespace": "hipster", - "resourceVersion": "61263240", - "uid": "368bea36-82be-4c28-8607-cf931a836185" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "adservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6415784d-d96b-4866-9c10-d571c8d8fd35", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:29", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-adservice" - }, - "creationTimestamp": null, - "labels": { - "app": "adservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/adservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 9555, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "300Mi" - }, - "requests": { - "cpu": "200m", - "memory": "180Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:24Z", - "lastUpdateTime": "2021-10-12T00:12:24Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:51Z", - "lastUpdateTime": "2021-10-13T00:28:12Z", - "message": "ReplicaSet \"adservice-7864446d5c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"cartservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"cartservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"cartservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"REDIS_ADDR\",\"value\":\"redis-cart:6379\"}],\"image\":\"gcr.io/google-samples/microservices-demo/cartservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15,\"periodSeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":7070}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:47Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"REDIS_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7070,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T09:40:08Z" - } - ], - "name": "cartservice", - "namespace": "hipster", - "resourceVersion": "61443544", - "uid": "df767287-ffc1-4559-b7fd-32b09bf6208c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "cartservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "7ced7c5c-c483-40b3-b6bc-8829339dc3e1", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:04", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-cartservice" - }, - "creationTimestamp": null, - "labels": { - "app": "cartservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "REDIS_ADDR", - "value": "redis-cart:6379" - } - ], - "image": "gcr.io/google-samples/microservices-demo/cartservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7070, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "128Mi" - }, - "requests": { - "cpu": "200m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-13T00:27:35Z", - "message": "ReplicaSet \"cartservice-7c8f8f9ddd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T09:40:08Z", - "lastUpdateTime": "2021-10-13T09:40:08Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"checkoutservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"checkoutservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"checkoutservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"5050\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"PAYMENT_SERVICE_ADDR\",\"value\":\"paymentservice:50051\"},{\"name\":\"EMAIL_SERVICE_ADDR\",\"value\":\"emailservice:5000\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"}],\"image\":\"gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":5050}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:42Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EMAIL_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PAYMENT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":5050,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:42Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:41Z" - } - ], - "name": "checkoutservice", - "namespace": "hipster", - "resourceVersion": "61262985", - "uid": "b5e6a8d8-1ec6-4acc-bf14-e3bb28bff284" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "checkoutservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "bebad8bb-8728-4813-ae19-d22a38a289a5", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:28", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-checkoutservice" - }, - "creationTimestamp": null, - "labels": { - "app": "checkoutservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "5050" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "PAYMENT_SERVICE_ADDR", - "value": "paymentservice:50051" - }, - { - "name": "EMAIL_SERVICE_ADDR", - "value": "emailservice:5000" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - } - ], - "image": "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 5050, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T14:05:32Z", - "lastUpdateTime": "2021-10-12T14:05:32Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:42Z", - "lastUpdateTime": "2021-10-13T00:27:42Z", - "message": "ReplicaSet \"checkoutservice-86c564466c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"currencyservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"currencyservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"currencyservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"7000\"}],\"image\":\"gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":7000,\"name\":\"grpc\"}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T08:37:54Z" - } - ], - "name": "currencyservice", - "namespace": "hipster", - "resourceVersion": "61423238", - "uid": "167b75e1-1be2-4764-aaad-dbb1ae248d3c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "currencyservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "4aa34494-0348-4859-9e29-56df9baf52ba", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-currencyservice" - }, - "creationTimestamp": null, - "labels": { - "app": "currencyservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "7000" - } - ], - "image": "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7000, - "name": "grpc", - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:29:19Z", - "message": "ReplicaSet \"currencyservice-544b6d849c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T08:37:54Z", - "lastUpdateTime": "2021-10-13T08:37:54Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"emailservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"emailservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"emailservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"DISABLE_PROFILER\",\"value\":\"1\"}],\"image\":\"gcr.io/google-samples/microservices-demo/emailservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:41Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"DISABLE_PROFILER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:41Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:07Z" - } - ], - "name": "emailservice", - "namespace": "hipster", - "resourceVersion": "61263204", - "uid": "9959433f-c964-4e6d-a2d7-3d1b9b617948" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "emailservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "e8aa9826-2367-44e1-9aad-a6d617b0fa06", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:48", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-emailservice" - }, - "creationTimestamp": null, - "labels": { - "app": "emailservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "DISABLE_PROFILER", - "value": "1" - } - ], - "image": "gcr.io/google-samples/microservices-demo/emailservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-12T00:11:47Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:41Z", - "lastUpdateTime": "2021-10-13T00:28:08Z", - "message": "ReplicaSet \"emailservice-cc7c4cd87\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"frontend\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"frontend\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"frontend\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"},{\"name\":\"RECOMMENDATION_SERVICE_ADDR\",\"value\":\"recommendationservice:8080\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"CHECKOUT_SERVICE_ADDR\",\"value\":\"checkoutservice:5050\"},{\"name\":\"AD_SERVICE_ADDR\",\"value\":\"adservice:9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/frontend:v0.2.3\",\"livenessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-liveness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-readiness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:44Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AD_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CHECKOUT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"RECOMMENDATION_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:44Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:34Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:22Z" - } - ], - "name": "frontend", - "namespace": "hipster", - "resourceVersion": "61263336", - "uid": "86b92d9e-22ad-4f0a-be26-41343f05f0d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "frontend" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9611f05f-4a8b-48ff-9722-e6a2ec702d65", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:57", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-frontend", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "frontend", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - }, - { - "name": "RECOMMENDATION_SERVICE_ADDR", - "value": "recommendationservice:8080" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "CHECKOUT_SERVICE_ADDR", - "value": "checkoutservice:5050" - }, - { - "name": "AD_SERVICE_ADDR", - "value": "adservice:9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/frontend:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-liveness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-readiness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:04Z", - "lastUpdateTime": "2021-10-12T00:12:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:44Z", - "lastUpdateTime": "2021-10-13T00:28:23Z", - "message": "ReplicaSet \"frontend-c747f6f47\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"loadgenerator\",\"namespace\":\"hipster\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"loadgenerator\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"loadgenerator\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"FRONTEND_ADDR\",\"value\":\"frontend:80\"},{\"name\":\"USERS\",\"value\":\"10\"}],\"image\":\"gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3\",\"name\":\"main\",\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"256Mi\"}}}],\"restartPolicy\":\"Always\",\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"main\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"FRONTEND_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"USERS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:38Z" - } - ], - "name": "loadgenerator", - "namespace": "hipster", - "resourceVersion": "61263451", - "uid": "e9200650-d25d-43f2-b1bc-4615beaed50c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "loadgenerator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "baca3d0f-fdc8-42c6-a9b1-ee29b3d173e0", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:26", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-loadgenerator", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "loadgenerator", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "FRONTEND_ADDR", - "value": "frontend:80" - }, - { - "name": "USERS", - "value": "10" - } - ], - "image": "gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "name": "main", - "resources": { - "limits": { - "cpu": "500m", - "memory": "512Mi" - }, - "requests": { - "cpu": "300m", - "memory": "256Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-13T00:24:15Z", - "lastUpdateTime": "2021-10-13T00:24:15Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:28:38Z", - "message": "ReplicaSet \"loadgenerator-6dcb6ffc4f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"paymentservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"paymentservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"paymentservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:45Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:45Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:29:27Z" - } - ], - "name": "paymentservice", - "namespace": "hipster", - "resourceVersion": "61263785", - "uid": "ab21c30f-d153-4ea8-982e-e12a71745dae" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "paymentservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "60b5720d-99b5-47a0-8bc4-656b372a6d17", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:52", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-paymentservice" - }, - "creationTimestamp": null, - "labels": { - "app": "paymentservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:45Z", - "lastUpdateTime": "2021-10-13T00:29:27Z", - "message": "ReplicaSet \"paymentservice-849b876ffd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"productcatalogservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"productcatalogservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"productcatalogservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":3550}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:46Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":3550,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:57Z" - } - ], - "name": "productcatalogservice", - "namespace": "hipster", - "resourceVersion": "61263117", - "uid": "50b29b6e-0f97-43b8-9555-a53d9c0e18f9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "productcatalogservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9bb4cc06-3907-401b-919f-c2974a623068", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-productcatalogservice" - }, - "creationTimestamp": null, - "labels": { - "app": "productcatalogservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 3550, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:46Z", - "lastUpdateTime": "2021-10-13T00:27:57Z", - "message": "ReplicaSet \"productcatalogservice-586fd876d5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"recommendationservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"recommendationservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"recommendationservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"450Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"220Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:43Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:37Z" - } - ], - "name": "recommendationservice", - "namespace": "hipster", - "resourceVersion": "61263443", - "uid": "00437f28-24c4-4759-ab93-f0be948eabc9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "recommendationservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "8cace306-b3ce-4f2f-8a6f-b122873b4eee", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-recommendationservice" - }, - "creationTimestamp": null, - "labels": { - "app": "recommendationservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "450Mi" - }, - "requests": { - "cpu": "100m", - "memory": "220Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-12T00:11:50Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:43Z", - "lastUpdateTime": "2021-10-13T00:28:37Z", - "message": "ReplicaSet \"recommendationservice-54b7b7b95d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"redis-cart\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"redis-cart\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"redis-cart\"}},\"spec\":{\"containers\":[{\"image\":\"redis:alpine\",\"livenessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"name\":\"redis\",\"ports\":[{\"containerPort\":6379}],\"readinessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"resources\":{\"limits\":{\"cpu\":\"125m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"70m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/data\",\"name\":\"redis-data\"}]}],\"volumes\":[{\"emptyDir\":{},\"name\":\"redis-data\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:50Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"redis\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":6379,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/data\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"redis-data\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:38Z" - } - ], - "name": "redis-cart", - "namespace": "hipster", - "resourceVersion": "61262948", - "uid": "76b3aebb-9ec5-479e-81ae-975ccf1bc6ec" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "redis-cart" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "838a7c21-618b-4693-a13b-838a9231ca58", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-redis-cart" - }, - "creationTimestamp": null, - "labels": { - "app": "redis-cart", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "image": "redis:alpine", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "name": "redis", - "ports": [ - { - "containerPort": 6379, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "125m", - "memory": "256Mi" - }, - "requests": { - "cpu": "70m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/data", - "name": "redis-data" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "emptyDir": {}, - "name": "redis-data" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:57Z", - "lastUpdateTime": "2021-10-12T00:11:57Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-13T00:27:38Z", - "message": "ReplicaSet \"redis-cart-594778c8b9\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"shippingservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"shippingservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"shippingservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:49Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:49Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:11Z" - } - ], - "name": "shippingservice", - "namespace": "hipster", - "resourceVersion": "61262726", - "uid": "febd2fe5-0e28-448e-aabd-31904ebb82a9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "shippingservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6503b850-839c-4b73-95ab-195d27b3c10d", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:26:58", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-shippingservice" - }, - "creationTimestamp": null, - "labels": { - "app": "shippingservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:00Z", - "lastUpdateTime": "2021-10-12T00:12:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:49Z", - "lastUpdateTime": "2021-10-13T00:27:11Z", - "message": "ReplicaSet \"shippingservice-758c9b4d4b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":\"10%\",\"maxUnavailable\":0}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"kubedns\",\"prometheus.io/port\":\"10054\",\"prometheus.io/scrape\":\"true\",\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"labels\":{\"k8s-app\":\"kube-dns\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchExpressions\":[{\"key\":\"k8s-app\",\"operator\":\"In\",\"values\":[\"kube-dns\"]}]},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"--domain=cluster.local.\",\"--dns-port=10053\",\"--config-dir=/kube-dns-config\",\"--v=2\"],\"env\":[{\"name\":\"PROMETHEUS_PORT\",\"value\":\"10055\"}],\"image\":\"gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/kubedns\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"kubedns\",\"ports\":[{\"containerPort\":10053,\"name\":\"dns-local\",\"protocol\":\"UDP\"},{\"containerPort\":10053,\"name\":\"dns-tcp-local\",\"protocol\":\"TCP\"},{\"containerPort\":10055,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readiness\",\"port\":8081,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":3,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"memory\":\"210Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"70Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001},\"volumeMounts\":[{\"mountPath\":\"/kube-dns-config\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"-v=2\",\"-logtostderr\",\"-configDir=/etc/k8s/dns/dnsmasq-nanny\",\"-restartDnsmasq=true\",\"--\",\"-k\",\"--cache-size=1000\",\"--no-negcache\",\"--dns-forward-max=1500\",\"--log-facility=-\",\"--server=/cluster.local/127.0.0.1#10053\",\"--server=/in-addr.arpa/127.0.0.1#10053\",\"--server=/ip6.arpa/127.0.0.1#10053\"],\"image\":\"gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/dnsmasq\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"dnsmasq\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"150m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"capabilities\":{\"add\":[\"NET_BIND_SERVICE\",\"SETGID\"],\"drop\":[\"all\"]}},\"volumeMounts\":[{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"--v=2\",\"--logtostderr\",\"--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV\",\"--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV\"],\"image\":\"gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/metrics\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"sidecar\",\"ports\":[{\"containerPort\":10054,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001}}],\"dnsPolicy\":\"Default\",\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 4, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:scheduler.alpha.kubernetes.io/critical-pod": {}, - "f:seccomp.security.alpha.kubernetes.io/pod": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:podAntiAffinity": { - ".": {}, - "f:preferredDuringSchedulingIgnoredDuringExecution": {} - } - }, - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:capabilities": { - ".": {}, - "f:add": {}, - "f:drop": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"kubedns\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PROMETHEUS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10053,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10053,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10055,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/kube-dns-config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"sidecar\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10054,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - "f:image": {} - }, - "k:{\"name\":\"kubedns\"}": { - "f:image": {} - }, - "k:{\"name\":\"sidecar\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:06:26Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "53109905", - "uid": "cd5cca24-7cd2-4548-a5d3-d90beb79f9e8" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 2, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "10%", - "maxUnavailable": 0 - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "kubedns", - "prometheus.io/port": "10054", - "prometheus.io/scrape": "true", - "scheduler.alpha.kubernetes.io/critical-pod": "", - "seccomp.security.alpha.kubernetes.io/pod": "runtime/default" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns" - } - }, - "spec": { - "affinity": { - "podAntiAffinity": { - "preferredDuringSchedulingIgnoredDuringExecution": [ - { - "podAffinityTerm": { - "labelSelector": { - "matchExpressions": [ - { - "key": "k8s-app", - "operator": "In", - "values": [ - "kube-dns" - ] - } - ] - }, - "topologyKey": "kubernetes.io/hostname" - }, - "weight": 100 - } - ] - } - }, - "containers": [ - { - "args": [ - "--domain=cluster.local.", - "--dns-port=10053", - "--config-dir=/kube-dns-config", - "--v=2" - ], - "env": [ - { - "name": "PROMETHEUS_PORT", - "value": "10055" - } - ], - "image": "gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/kubedns", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "kubedns", - "ports": [ - { - "containerPort": 10053, - "name": "dns-local", - "protocol": "UDP" - }, - { - "containerPort": 10053, - "name": "dns-tcp-local", - "protocol": "TCP" - }, - { - "containerPort": 10055, - "name": "metrics", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/readiness", - "port": 8081, - "scheme": "HTTP" - }, - "initialDelaySeconds": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "resources": { - "limits": { - "memory": "210Mi" - }, - "requests": { - "cpu": "100m", - "memory": "70Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/kube-dns-config", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "-v=2", - "-logtostderr", - "-configDir=/etc/k8s/dns/dnsmasq-nanny", - "-restartDnsmasq=true", - "--", - "-k", - "--cache-size=1000", - "--no-negcache", - "--dns-forward-max=1500", - "--log-facility=-", - "--server=/cluster.local/127.0.0.1#10053", - "--server=/in-addr.arpa/127.0.0.1#10053", - "--server=/ip6.arpa/127.0.0.1#10053" - ], - "image": "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/dnsmasq", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "dnsmasq", - "ports": [ - { - "containerPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "150m", - "memory": "20Mi" - } - }, - "securityContext": { - "capabilities": { - "add": [ - "NET_BIND_SERVICE", - "SETGID" - ], - "drop": [ - "all" - ] - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/k8s/dns/dnsmasq-nanny", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "--v=2", - "--logtostderr", - "--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV", - "--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV" - ], - "image": "gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/metrics", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "sidecar", - "ports": [ - { - "containerPort": 10054, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns", - "serviceAccountName": "kube-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 2, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-09-11T01:57:38Z", - "message": "ReplicaSet \"kube-dns-59844ff879\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:06:26Z", - "lastUpdateTime": "2021-09-25T17:06:26Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 4, - "readyReplicas": 2, - "replicas": 2, - "updatedReplicas": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns-autoscaler\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns-autoscaler\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"spec\":{\"containers\":[{\"command\":[\"/cluster-proportional-autoscaler\",\"--namespace=kube-system\",\"--configmap=kube-dns-autoscaler\",\"--target=Deployment/kube-dns\",\"--default-params={\\\"linear\\\":{\\\"coresPerReplica\\\":256,\\\"nodesPerReplica\\\":16,\\\"preventSinglePointFailure\\\":true,\\\"includeUnschedulableNodes\\\":true}}\",\"--logtostderr=true\",\"--v=2\"],\"image\":\"gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0\",\"name\":\"autoscaler\",\"resources\":{\"requests\":{\"cpu\":\"20m\",\"memory\":\"10Mi\"}}}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"seccompProfile\":{\"type\":\"RuntimeDefault\"},\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns-autoscaler\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns-autoscaler", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"autoscaler\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:02:52Z" - } - ], - "name": "kube-dns-autoscaler", - "namespace": "kube-system", - "resourceVersion": "53108562", - "uid": "c84ce079-f3c8-46ba-871f-0f2d42ffee1e" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/cluster-proportional-autoscaler", - "--namespace=kube-system", - "--configmap=kube-dns-autoscaler", - "--target=Deployment/kube-dns", - "--default-params={\"linear\":{\"coresPerReplica\":256,\"nodesPerReplica\":16,\"preventSinglePointFailure\":true,\"includeUnschedulableNodes\":true}}", - "--logtostderr=true", - "--v=2" - ], - "image": "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "autoscaler", - "resources": { - "requests": { - "cpu": "20m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "seccompProfile": { - "type": "RuntimeDefault" - }, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns-autoscaler", - "serviceAccountName": "kube-dns-autoscaler", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:54:39Z", - "message": "ReplicaSet \"kube-dns-autoscaler-844c9d9448\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:02:52Z", - "lastUpdateTime": "2021-09-25T17:02:52Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"glbc\",\"kubernetes.io/cluster-service\":\"true\",\"kubernetes.io/name\":\"GLBC\"},\"name\":\"l7-default-backend\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"glbc\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"glbc\",\"name\":\"glbc\"}},\"spec\":{\"containers\":[{\"image\":\"k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":30,\"timeoutSeconds\":5},\"name\":\"default-http-backend\",\"ports\":[{\"containerPort\":8080}],\"resources\":{\"limits\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}}}],\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"tolerations\":[{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "glbc", - "kubernetes.io/cluster-service": "true", - "kubernetes.io/name": "GLBC" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:kubernetes.io/name": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:name": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"default-http-backend\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:seccompProfile": { - "f:type": {} - } - }, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:01:20Z" - } - ], - "name": "l7-default-backend", - "namespace": "kube-system", - "resourceVersion": "53107969", - "uid": "32a76c03-37a1-44e9-b293-dd6b46ed274b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "glbc" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "glbc", - "name": "glbc" - } - }, - "spec": { - "containers": [ - { - "image": "k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 30, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "default-http-backend", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "10m", - "memory": "20Mi" - }, - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:56:25Z", - "message": "ReplicaSet \"l7-default-backend-56cb9644f6\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:01:20Z", - "lastUpdateTime": "2021-09-25T17:01:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "24", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metrics-server\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server-v0.3.6\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server\"},\"spec\":{\"containers\":[{\"command\":[\"/metrics-server\",\"--metric-resolution=30s\",\"--kubelet-port=10255\",\"--deprecated-kubelet-completely-insecure=true\",\"--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP\"],\"image\":\"k8s.gcr.io/metrics-server-amd64:v0.3.6\",\"name\":\"metrics-server\",\"ports\":[{\"containerPort\":443,\"name\":\"https\",\"protocol\":\"TCP\"}]},{\"command\":[\"/pod_nanny\",\"--config-dir=/etc/config\",\"--cpu=40m\",\"--extra-cpu=0.5m\",\"--memory=35Mi\",\"--extra-memory=4Mi\",\"--threshold=5\",\"--deployment=metrics-server-v0.3.6\",\"--container=metrics-server\",\"--poll-period=300000\",\"--estimator=exponential\",\"--scale-down-delay=24h\",\"--minClusterSize=5\",\"--use-metrics=true\"],\"env\":[{\"name\":\"MY_POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"MY_POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"gke.gcr.io/addon-resizer:1.8.11-gke.0\",\"name\":\"metrics-server-nanny\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"5m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"metrics-server-config-volume\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"metrics-server\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"metrics-server-config\"},\"name\":\"metrics-server-config-volume\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 24, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metrics-server", - "kubernetes.io/cluster-service": "true", - "version": "v0.3.6" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:version": {} - }, - "f:name": {} - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - }, - "k:{\"name\":\"metrics-server-nanny\"}": { - ".": {}, - "f:command": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"MY_POD_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"MY_POD_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"metrics-server-config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - "f:resources": { - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - } - } - } - } - } - } - }, - "manager": "pod_nanny", - "operation": "Update", - "time": "2021-06-13T13:42:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-26T17:13:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-26T17:13:52Z" - } - ], - "name": "metrics-server-v0.3.6", - "namespace": "kube-system", - "resourceVersion": "53582788", - "uid": "872d0f34-7998-45d3-9eea-570e0a47e03c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - }, - "name": "metrics-server" - }, - "spec": { - "containers": [ - { - "command": [ - "/metrics-server", - "--metric-resolution=30s", - "--kubelet-port=10255", - "--deprecated-kubelet-completely-insecure=true", - "--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP" - ], - "image": "k8s.gcr.io/metrics-server-amd64:v0.3.6", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server", - "ports": [ - { - "containerPort": 443, - "name": "https", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "44m", - "memory": "63Mi" - }, - "requests": { - "cpu": "44m", - "memory": "63Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - }, - { - "command": [ - "/pod_nanny", - "--config-dir=/etc/config", - "--cpu=40m", - "--extra-cpu=0.5m", - "--memory=35Mi", - "--extra-memory=4Mi", - "--threshold=5", - "--deployment=metrics-server-v0.3.6", - "--container=metrics-server", - "--poll-period=300000", - "--estimator=exponential", - "--scale-down-delay=24h", - "--minClusterSize=5", - "--use-metrics=true" - ], - "env": [ - { - "name": "MY_POD_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.name" - } - } - }, - { - "name": "MY_POD_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - } - ], - "image": "gke.gcr.io/addon-resizer:1.8.11-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server-nanny", - "resources": { - "limits": { - "cpu": "100m", - "memory": "300Mi" - }, - "requests": { - "cpu": "5m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "metrics-server-config-volume" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "serviceAccount": "metrics-server", - "serviceAccountName": "metrics-server", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "metrics-server-config" - }, - "name": "metrics-server-config-volume" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-09-25T17:12:33Z", - "lastUpdateTime": "2021-09-25T17:12:33Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-06-13T13:42:20Z", - "lastUpdateTime": "2021-09-26T17:13:52Z", - "message": "ReplicaSet \"metrics-server-v0.3.6-7889654bbb\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 24, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "6", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-proxy\"},\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-proxy\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-proxy\"}},\"spec\":{\"containers\":[{\"command\":[\"/bin/sh\",\"-c\",\"kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\\u003e\\u003e/var/log/kube-proxy.log 2\\u003e\\u00261\"],\"env\":[{\"name\":\"KUBERNETES_SERVICE_HOST\",\"value\":\"34.78.97.243\"}],\"image\":\"gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001\",\"name\":\"kube-proxy\",\"resources\":{\"requests\":{\"cpu\":\"100m\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/log\",\"name\":\"varlog\",\"readOnly\":false},{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/lib/modules\",\"name\":\"lib-modules\",\"readOnly\":true}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\",\"node.kubernetes.io/kube-proxy-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"kube-proxy\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/log\"},\"name\":\"varlog\"},{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"hostPath\":{\"path\":\"/lib/modules\"},\"name\":\"lib-modules\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "generation": 6, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-proxy" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBERNETES_SERVICE_HOST\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/kube-proxy-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - "f:command": {}, - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:44Z" - } - ], - "name": "kube-proxy", - "namespace": "kube-system", - "resourceVersion": "52161714", - "uid": "bb6f9ab0-e586-407b-95c0-773637c696e8" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-proxy" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-proxy" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "env": [ - { - "name": "KUBERNETES_SERVICE_HOST", - "value": "34.78.97.243" - } - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux", - "node.kubernetes.io/kube-proxy-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "kube-proxy", - "serviceAccountName": "kube-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 6 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"},\"name\":\"metadata-proxy-v0.1\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metadata-proxy\",\"version\":\"v0.1\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"}},\"spec\":{\"containers\":[{\"args\":[\"--addr=0.0.0.0:988\"],\"image\":\"k8s.gcr.io/metadata-proxy:v0.1.12\",\"name\":\"metadata-proxy\",\"resources\":{\"limits\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"},\"requests\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"}},\"securityContext\":{\"privileged\":true}}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"cloud.google.com/metadata-proxy-ready\":\"true\",\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"metadata-proxy\",\"terminationGracePeriodSeconds\":30,\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 3, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:cloud.google.com/metadata-proxy-ready": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - "f:args": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - } - ], - "name": "metadata-proxy-v0.1", - "namespace": "kube-system", - "resourceVersion": "25934435", - "uid": "94bf5845-f77b-47d4-bcec-e78549b4d8a3" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metadata-proxy", - "version": "v0.1" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--addr=0.0.0.0:988" - ], - "image": "k8s.gcr.io/metadata-proxy:v0.1.12", - "imagePullPolicy": "IfNotPresent", - "name": "metadata-proxy", - "resources": { - "limits": { - "cpu": "30m", - "memory": "25Mi" - }, - "requests": { - "cpu": "30m", - "memory": "25Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "cloud.google.com/metadata-proxy-ready": "true", - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "metadata-proxy", - "serviceAccountName": "metadata-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 3 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"node-local-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"node-local-dns\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"nodelocaldns\",\"components.gke.io/component-version\":\"1.4.0\",\"prometheus.io/port\":\"9253\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"k8s-app\":\"node-local-dns\"}},\"spec\":{\"containers\":[{\"args\":[\"-localip\",\"169.254.20.10,10.72.0.10\",\"-conf\",\"/etc/Corefile\",\"-upstreamsvc\",\"kube-dns-upstream\",\"-kubednscm\",\"/etc/kube-dns\"],\"image\":\"gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1\",\"livenessProbe\":{\"httpGet\":{\"host\":\"169.254.20.10\",\"path\":\"/health\",\"port\":8080},\"initialDelaySeconds\":60,\"timeoutSeconds\":5},\"name\":\"node-cache\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"},{\"containerPort\":9253,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"25m\",\"memory\":\"5Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/etc/coredns\",\"name\":\"config-volume\"},{\"mountPath\":\"/etc/kube-dns\",\"name\":\"kube-dns-config\"}]}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"addon.gke.io/node-local-dns-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"node-local-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"},{\"configMap\":{\"items\":[{\"key\":\"Corefile\",\"path\":\"Corefile.base\"}],\"name\":\"node-local-dns\"},\"name\":\"config-volume\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"}}}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "node-local-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:host": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":9253,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/coredns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/kube-dns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:addon.gke.io/node-local-dns-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "53114241", - "uid": "5069e9ba-0784-41bf-9577-3757bcb3b6d6" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "node-local-dns" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "nodelocaldns", - "components.gke.io/component-version": "1.4.0", - "prometheus.io/port": "9253", - "prometheus.io/scrape": "true" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "node-local-dns" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-localip", - "169.254.20.10,10.72.0.10", - "-conf", - "/etc/Corefile", - "-upstreamsvc", - "kube-dns-upstream", - "-kubednscm", - "/etc/kube-dns" - ], - "image": "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "host": "169.254.20.10", - "path": "/health", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "node-cache", - "ports": [ - { - "containerPort": 53, - "hostPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "hostPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - }, - { - "containerPort": 9253, - "hostPort": 9253, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "25m", - "memory": "5Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/etc/coredns", - "name": "config-volume" - }, - { - "mountPath": "/etc/kube-dns", - "name": "kube-dns-config" - } - ] - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "addon.gke.io/node-local-dns-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "node-local-dns", - "serviceAccountName": "node-local-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "Corefile", - "path": "Corefile.base" - } - ], - "name": "node-local-dns" - }, - "name": "config-volume" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 2, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"nvidia-gpu-device-plugin\"},\"name\":\"nvidia-gpu-device-plugin\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"cloud.google.com/gke-accelerator\",\"operator\":\"Exists\"}]}]}}},\"containers\":[{\"command\":[\"/usr/bin/nvidia-gpu-device-plugin\",\"-logtostderr\",\"--enable-container-gpu-metrics\",\"--enable-health-monitoring\"],\"env\":[{\"name\":\"LD_LIBRARY_PATH\",\"value\":\"/usr/local/nvidia/lib64\"}],\"image\":\"gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317\",\"name\":\"nvidia-gpu-device-plugin\",\"ports\":[{\"containerPort\":2112,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/device-plugin\",\"name\":\"device-plugin\"},{\"mountPath\":\"/dev\",\"name\":\"dev\"},{\"mountPath\":\"/usr/local/nvidia\",\"name\":\"nvidia\"},{\"mountPath\":\"/var/lib/kubelet/pod-resources\",\"name\":\"pod-resources\"},{\"mountPath\":\"/proc\",\"name\":\"proc\"},{\"mountPath\":\"/etc/nvidia\",\"name\":\"nvidia-config\"}]}],\"priorityClassName\":\"system-node-critical\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/device-plugins\"},\"name\":\"device-plugin\"},{\"hostPath\":{\"path\":\"/dev\"},\"name\":\"dev\"},{\"hostPath\":{\"path\":\"/home/kubernetes/bin/nvidia\",\"type\":\"Directory\"},\"name\":\"nvidia\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/pod-resources\"},\"name\":\"pod-resources\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"proc\"},{\"hostPath\":{\"path\":\"/etc/nvidia\"},\"name\":\"nvidia-config\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:17Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "nvidia-gpu-device-plugin" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:nodeAffinity": { - ".": {}, - "f:requiredDuringSchedulingIgnoredDuringExecution": { - ".": {}, - "f:nodeSelectorTerms": {} - } - } - }, - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"LD_LIBRARY_PATH\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":2112,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/device-plugin\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/local/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet/pod-resources\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"dev\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"device-plugin\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"nvidia\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"pod-resources\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - "f:command": {}, - "f:image": {}, - "f:volumeMounts": { - "k:{\"mountPath\":\"/etc/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/proc\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:volumes": { - "k:{\"name\":\"nvidia-config\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"proc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "nvidia-gpu-device-plugin", - "namespace": "kube-system", - "resourceVersion": "25934477", - "uid": "14396a20-ecee-4671-aefe-2a5b9d2e0dde" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "spec": { - "affinity": { - "nodeAffinity": { - "requiredDuringSchedulingIgnoredDuringExecution": { - "nodeSelectorTerms": [ - { - "matchExpressions": [ - { - "key": "cloud.google.com/gke-accelerator", - "operator": "Exists" - } - ] - } - ] - } - } - }, - "containers": [ - { - "command": [ - "/usr/bin/nvidia-gpu-device-plugin", - "-logtostderr", - "--enable-container-gpu-metrics", - "--enable-health-monitoring" - ], - "env": [ - { - "name": "LD_LIBRARY_PATH", - "value": "/usr/local/nvidia/lib64" - } - ], - "image": "gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317", - "imagePullPolicy": "IfNotPresent", - "name": "nvidia-gpu-device-plugin", - "ports": [ - { - "containerPort": 2112, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "20Mi" - }, - "requests": { - "cpu": "50m", - "memory": "20Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/device-plugin", - "name": "device-plugin" - }, - { - "mountPath": "/dev", - "name": "dev" - }, - { - "mountPath": "/usr/local/nvidia", - "name": "nvidia" - }, - { - "mountPath": "/var/lib/kubelet/pod-resources", - "name": "pod-resources" - }, - { - "mountPath": "/proc", - "name": "proc" - }, - { - "mountPath": "/etc/nvidia", - "name": "nvidia-config" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/device-plugins", - "type": "" - }, - "name": "device-plugin" - }, - { - "hostPath": { - "path": "/dev", - "type": "" - }, - "name": "dev" - }, - { - "hostPath": { - "path": "/home/kubernetes/bin/nvidia", - "type": "Directory" - }, - "name": "nvidia" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/pod-resources", - "type": "" - }, - "name": "pod-resources" - }, - { - "hostPath": { - "path": "/proc", - "type": "" - }, - "name": "proc" - }, - { - "hostPath": { - "path": "/etc/nvidia", - "type": "" - }, - "name": "nvidia-config" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:02:45.009201226Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:02:48Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"6de798cc-d558-479a-8ef4-38363e434633\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.63\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:02:55Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-5naq", - "uid": "6de798cc-d558-479a-8ef4-38363e434633" - } - ], - "resourceVersion": "53108585", - "uid": "fdd66d80-d09d-4b43-a291-b3797c7a5864" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-5naq", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://50767376b8a42b7a390e84c5c451d1485b1a562873b915100dc605bbcc49c1c5", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:02:48Z" - } - } - } - ], - "hostIP": "10.132.0.63", - "phase": "Running", - "podIP": "10.132.0.63", - "podIPs": [ - { - "ip": "10.132.0.63" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:02:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:09:05.595580038Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:09:09Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"d288c56c-2a00-42fe-b2ea-b8761fec2a4e\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.193\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:09:16Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-abj3", - "uid": "d288c56c-2a00-42fe-b2ea-b8761fec2a4e" - } - ], - "resourceVersion": "53110982", - "uid": "0866b060-d7a6-40bc-9ed9-292fbce958e9" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-abj3", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b04121a3de085254493b48dbe1be551abd021877d1c098afbd19e6429df8f4ba", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:09:08Z" - } - } - } - ], - "hostIP": "10.132.15.193", - "phase": "Running", - "podIP": "10.132.15.193", - "podIPs": [ - { - "ip": "10.132.15.193" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:09:06Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:56:27.195784979Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:56:29Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"9aa58d78-0147-4564-9900-0409a6bec341\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.61\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:56:37Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-enr8", - "uid": "9aa58d78-0147-4564-9900-0409a6bec341" - } - ], - "resourceVersion": "53106105", - "uid": "b940e7b5-9e7f-4ac7-a3ee-6c6655c1e65a" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-enr8", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b9375aed4bc463ecfa5fcfb0cfb3b55d087416bfe0c3267c1395e8f93569d03c", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:56:29Z" - } - } - } - ], - "hostIP": "10.132.0.61", - "phase": "Running", - "podIP": "10.132.0.61", - "podIPs": [ - { - "ip": "10.132.0.61" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:56:28Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:59:41.285621877Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:59:44Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"c1ab3c15-9764-40f5-ba6b-82556dc98ea2\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.62\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:59:52Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-oq2w", - "uid": "c1ab3c15-9764-40f5-ba6b-82556dc98ea2" - } - ], - "resourceVersion": "53107378", - "uid": "19e52dea-6339-4ed7-8e32-3d39b242d133" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-oq2w", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://a0b27bef16953a38c48075124547583280bccf28d1d6cf54c3b3e754e2847c86", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:59:44Z" - } - } - } - ], - "hostIP": "10.132.0.62", - "phase": "Running", - "podIP": "10.132.0.62", - "podIPs": [ - { - "ip": "10.132.0.62" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:59:42Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:12:12.095932889Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:12:15Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"7042c0e8-8dc5-4d1d-8b36-92c692c31c76\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.194\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:12:22Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-rgdp", - "uid": "7042c0e8-8dc5-4d1d-8b36-92c692c31c76" - } - ], - "resourceVersion": "53112149", - "uid": "5248c280-7bde-4fe9-a74e-56ae25abb0d2" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-rgdp", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://fd91ae480585a78c59ef401dc852d58921e76693ecbd908d98e4b63da6c298ff", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:12:14Z" - } - } - } - ], - "hostIP": "10.132.15.194", - "phase": "Running", - "podIP": "10.132.15.194", - "podIPs": [ - { - "ip": "10.132.15.194" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:12:13Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:05:45.558688986Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:05:49Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"a58f61e7-9d9e-4266-90d4-16b9969cb373\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.192\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:05:56Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-x940", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-x940", - "uid": "a58f61e7-9d9e-4266-90d4-16b9969cb373" - } - ], - "resourceVersion": "53109692", - "uid": "71a05734-f741-4b7e-82fe-765c555b3607" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-x940", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://6abab671623159f7174321118f58600f8955267a139a72508e9a73631ef7920d", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:05:48Z" - } - } - } - ], - "hostIP": "10.132.15.192", - "phase": "Running", - "podIP": "10.132.15.192", - "podIPs": [ - { - "ip": "10.132.15.192" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:05:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:15:06.466708143Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:15:10Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"65f37105-dd71-428b-bf8b-0e82b88027f1\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.195\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:15:17Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-zzyg", - "uid": "65f37105-dd71-428b-bf8b-0e82b88027f1" - } - ], - "resourceVersion": "53113200", - "uid": "dac23622-ae54-4a1a-a6ca-3c020911966e" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-zzyg", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://ee309dad5cb7047fcbd7eb0401760ccb4bd986080ab11c860911e37b132a2a5c", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:15:09Z" - } - } - } - ], - "hostIP": "10.132.15.195", - "phase": "Running", - "podIP": "10.132.15.195", - "podIPs": [ - { - "ip": "10.132.15.195" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:15:07Z" - } - }, - { - "apiVersion": "v1", - "kind": "ResourceQuota", - "metadata": { - "creationTimestamp": "2021-10-12T00:18:35Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:hard": { - "f:count/ingresses.extensions": {}, - "f:count/ingresses.networking.k8s.io": {}, - "f:count/jobs.batch": {}, - "f:pods": {}, - "f:services": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:18:35Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:hard": { - ".": {}, - "f:count/ingresses.extensions": {}, - "f:count/ingresses.networking.k8s.io": {}, - "f:count/jobs.batch": {}, - "f:pods": {}, - "f:services": {} - } - } - }, - "manager": "resourcequota", - "operation": "Update", - "time": "2021-10-12T00:18:35Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:used": { - "f:pods": {}, - "f:services": {} - } - } - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-10-12T00:18:43Z" - } - ], - "name": "gke-resource-quotas", - "namespace": "cyberarmor-system", - "resourceVersion": "60786957", - "uid": "90c3fbd6-349f-453d-9950-4a4bec9e2d4f" - }, - "spec": { - "hard": { - "count/ingresses.extensions": "5k", - "count/ingresses.networking.k8s.io": "5k", - "count/jobs.batch": "10k", - "pods": "5k", - "services": "1500" - } - }, - "status": { - "hard": { - "count/ingresses.extensions": "5k", - "count/ingresses.networking.k8s.io": "5k", - "count/jobs.batch": "10k", - "pods": "5k", - "services": "1500" - }, - "used": { - "count/ingresses.extensions": "0", - "count/ingresses.networking.k8s.io": "0", - "count/jobs.batch": "0", - "pods": "10", - "services": "8" - } - } - }, - { - "apiVersion": "v1", - "kind": "ResourceQuota", - "metadata": { - "creationTimestamp": "2021-06-13T13:44:39Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:hard": { - ".": {}, - "f:count/ingresses.extensions": {}, - "f:count/ingresses.networking.k8s.io": {}, - "f:count/jobs.batch": {}, - "f:pods": {}, - "f:services": {} - } - } - }, - "manager": "resourcequota", - "operation": "Update", - "time": "2021-06-13T13:44:39Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:used": { - "f:services": {} - } - } - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-08-17T17:01:18Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:hard": { - "f:count/ingresses.extensions": {}, - "f:count/ingresses.networking.k8s.io": {}, - "f:count/jobs.batch": {}, - "f:pods": {}, - "f:services": {} - }, - "f:used": { - "f:pods": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-08-17T17:02:13Z" - } - ], - "name": "gke-resource-quotas", - "namespace": "default", - "resourceVersion": "34533188", - "uid": "0bb3a244-4340-4240-af20-d77c119fc30a" - }, - "spec": { - "hard": { - "count/ingresses.extensions": "5k", - "count/ingresses.networking.k8s.io": "5k", - "count/jobs.batch": "10k", - "pods": "5k", - "services": "1500" - } - }, - "status": { - "hard": { - "count/ingresses.extensions": "5k", - "count/ingresses.networking.k8s.io": "5k", - "count/jobs.batch": "10k", - "pods": "5k", - "services": "1500" - }, - "used": { - "count/ingresses.extensions": "0", - "count/ingresses.networking.k8s.io": "0", - "count/jobs.batch": "0", - "pods": "0", - "services": "2" - } - } - }, - { - "apiVersion": "v1", - "kind": "ResourceQuota", - "metadata": { - "creationTimestamp": "2021-07-27T19:59:29Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:hard": { - ".": {}, - "f:count/ingresses.extensions": {}, - "f:count/ingresses.networking.k8s.io": {}, - "f:count/jobs.batch": {}, - "f:pods": {}, - "f:services": {} - } - } - }, - "manager": "resourcequota", - "operation": "Update", - "time": "2021-07-27T19:59:29Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:hard": { - "f:count/ingresses.extensions": {}, - "f:count/ingresses.networking.k8s.io": {}, - "f:count/jobs.batch": {}, - "f:pods": {}, - "f:services": {} - }, - "f:used": { - "f:pods": {}, - "f:services": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:29:36Z" - } - ], - "name": "gke-resource-quotas", - "namespace": "hipster", - "resourceVersion": "61263837", - "uid": "c5975042-2d4b-4e13-bdd5-07eabc9b5b13" - }, - "spec": { - "hard": { - "count/ingresses.extensions": "5k", - "count/ingresses.networking.k8s.io": "5k", - "count/jobs.batch": "10k", - "pods": "5k", - "services": "1500" - } - }, - "status": { - "hard": { - "count/ingresses.extensions": "5k", - "count/ingresses.networking.k8s.io": "5k", - "count/jobs.batch": "10k", - "pods": "5k", - "services": "1500" - }, - "used": { - "count/ingresses.extensions": "0", - "count/ingresses.networking.k8s.io": "0", - "count/jobs.batch": "0", - "pods": "12", - "services": "12" - } - } - }, - { - "apiVersion": "v1", - "kind": "ResourceQuota", - "metadata": { - "creationTimestamp": "2021-06-13T13:44:39Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:hard": { - ".": {}, - "f:count/ingresses.extensions": {}, - "f:count/ingresses.networking.k8s.io": {}, - "f:count/jobs.batch": {}, - "f:pods": {}, - "f:services": {} - } - } - }, - "manager": "resourcequota", - "operation": "Update", - "time": "2021-06-13T13:44:39Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:hard": { - "f:count/ingresses.extensions": {}, - "f:count/ingresses.networking.k8s.io": {}, - "f:count/jobs.batch": {}, - "f:pods": {}, - "f:services": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-23T20:15:00Z" - } - ], - "name": "gke-resource-quotas", - "namespace": "kube-node-lease", - "resourceVersion": "5470191", - "uid": "3b25ea2e-a88d-421d-9ff4-35526f34df09" - }, - "spec": { - "hard": { - "count/ingresses.extensions": "5k", - "count/ingresses.networking.k8s.io": "5k", - "count/jobs.batch": "10k", - "pods": "5k", - "services": "1500" - } - }, - "status": { - "hard": { - "count/ingresses.extensions": "5k", - "count/ingresses.networking.k8s.io": "5k", - "count/jobs.batch": "10k", - "pods": "5k", - "services": "1500" - }, - "used": { - "count/ingresses.extensions": "0", - "count/ingresses.networking.k8s.io": "0", - "count/jobs.batch": "0", - "pods": "0", - "services": "0" - } - } - }, - { - "apiVersion": "v1", - "kind": "ResourceQuota", - "metadata": { - "creationTimestamp": "2021-06-13T13:44:39Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:hard": { - ".": {}, - "f:count/ingresses.extensions": {}, - "f:count/ingresses.networking.k8s.io": {}, - "f:count/jobs.batch": {}, - "f:pods": {}, - "f:services": {} - } - } - }, - "manager": "resourcequota", - "operation": "Update", - "time": "2021-06-13T13:44:39Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:hard": { - "f:count/ingresses.extensions": {}, - "f:count/ingresses.networking.k8s.io": {}, - "f:count/jobs.batch": {}, - "f:pods": {}, - "f:services": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-23T20:15:02Z" - } - ], - "name": "gke-resource-quotas", - "namespace": "kube-public", - "resourceVersion": "5470201", - "uid": "44c42bd7-3127-4a9a-baea-51d220773088" - }, - "spec": { - "hard": { - "count/ingresses.extensions": "5k", - "count/ingresses.networking.k8s.io": "5k", - "count/jobs.batch": "10k", - "pods": "5k", - "services": "1500" - } - }, - "status": { - "hard": { - "count/ingresses.extensions": "5k", - "count/ingresses.networking.k8s.io": "5k", - "count/jobs.batch": "10k", - "pods": "5k", - "services": "1500" - }, - "used": { - "count/ingresses.extensions": "0", - "count/ingresses.networking.k8s.io": "0", - "count/jobs.batch": "0", - "pods": "0", - "services": "0" - } - } - }, - { - "apiVersion": "v1", - "kind": "ResourceQuota", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ResourceQuota\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"gcp-critical-pods\",\"namespace\":\"kube-system\"},\"spec\":{\"hard\":{\"pods\":\"1000000000\"},\"scopeSelector\":{\"matchExpressions\":[{\"operator\":\"In\",\"scopeName\":\"PriorityClass\",\"values\":[\"system-node-critical\",\"system-cluster-critical\"]}]}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:spec": { - "f:hard": { - ".": {}, - "f:pods": {} - }, - "f:scopeSelector": { - ".": {}, - "f:matchExpressions": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:hard": { - ".": {}, - "f:pods": {} - }, - "f:used": { - ".": {}, - "f:pods": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-26T17:14:02Z" - } - ], - "name": "gcp-critical-pods", - "namespace": "kube-system", - "resourceVersion": "53582847", - "uid": "81928318-4137-4d44-a9b4-e64dc5669939" - }, - "spec": { - "hard": { - "pods": "1G" - }, - "scopeSelector": { - "matchExpressions": [ - { - "operator": "In", - "scopeName": "PriorityClass", - "values": [ - "system-node-critical", - "system-cluster-critical" - ] - } - ] - } - }, - "status": { - "hard": { - "pods": "1G" - }, - "used": { - "pods": "25" - } - } - }, - { - "apiVersion": "v1", - "kind": "ResourceQuota", - "metadata": { - "creationTimestamp": "2021-06-13T13:44:41Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:hard": { - ".": {}, - "f:count/ingresses.extensions": {}, - "f:count/ingresses.networking.k8s.io": {}, - "f:count/jobs.batch": {}, - "f:pods": {}, - "f:services": {} - } - } - }, - "manager": "resourcequota", - "operation": "Update", - "time": "2021-06-13T13:44:41Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:used": { - "f:services": {} - } - } - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-09-26T17:13:37Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:hard": { - "f:count/ingresses.extensions": {}, - "f:count/ingresses.networking.k8s.io": {}, - "f:count/jobs.batch": {}, - "f:pods": {}, - "f:services": {} - }, - "f:used": { - "f:pods": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-26T17:14:02Z" - } - ], - "name": "gke-resource-quotas", - "namespace": "kube-system", - "resourceVersion": "53582846", - "uid": "59d78cad-59d3-42ae-b068-4481ec3756ce" - }, - "spec": { - "hard": { - "count/ingresses.extensions": "5k", - "count/ingresses.networking.k8s.io": "5k", - "count/jobs.batch": "10k", - "pods": "5k", - "services": "1500" - } - }, - "status": { - "hard": { - "count/ingresses.extensions": "5k", - "count/ingresses.networking.k8s.io": "5k", - "count/jobs.batch": "10k", - "pods": "5k", - "services": "1500" - }, - "used": { - "count/ingresses.extensions": "0", - "count/ingresses.networking.k8s.io": "0", - "count/jobs.batch": "0", - "pods": "26", - "services": "4" - } - } - } - ], - "listInputKinds": null - } - ], - "remediation": "Define LimitRange and ResourceQuota policies to limit resource usage for namespaces or nodes.", - "description": "CPU and memory resources should have a limit set for every container to prevent resource exhaustion. This control identifies all the Pods without resource limit definition.", - "score": 100 - }, - { - "guid": "", - "attributes": { - "armoBuiltin": true, - "microsoftMitreColumns": [ - "Initial Access" - ] - }, - "id": "C-0047", - "controlID": "C-0047", - "name": "Exposed dashboard", - "ruleReports": [ - { - "name": "rule-exposed-dashboard", - "remediation": "", - "ruleStatus": { - "status": "success", - "message": "" - }, - "ruleResponses": null, - "listInputResources": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-audit\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-audit\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CONFIG_FILES\",\"value\":\"/config/config.json\"},{\"name\":\"CA_SERVER_TYPE\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"cluster_kind\",\"name\":\"ca-audit\"}}}],\"image\":\"quay.io/armosec/k8s-ca-auditlog-ubi:21\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-audit\",\"ports\":[{\"containerPort\":443,\"name\":\"ca-audit-port\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/config\",\"name\":\"ca-audit\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-audit\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"config\",\"path\":\"config.json\"}],\"name\":\"ca-audit\"},\"name\":\"ca-audit\"},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:54Z", - "generation": 1, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CONFIG_FILES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_SERVER_TYPE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:54Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-audit", - "namespace": "cyberarmor-system", - "resourceVersion": "60787209", - "uid": "687f52ea-6956-4e8a-bb8c-7ea35a04b3f0" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-audit" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CONFIG_FILES", - "value": "/config/config.json" - }, - { - "name": "CA_SERVER_TYPE", - "valueFrom": { - "configMapKeyRef": { - "key": "cluster_kind", - "name": "ca-audit" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-auditlog-ubi:21", - "imagePullPolicy": "Always", - "name": "ca-audit", - "ports": [ - { - "containerPort": 443, - "name": "ca-audit-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/config", - "name": "ca-audit", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-audit", - "serviceAccountName": "ca-audit", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "config", - "path": "config.json" - } - ], - "name": "ca-audit" - }, - "name": "ca-audit" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:54Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-audit-c667df747\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-dashboard-aggregator\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-dashboard-aggregator\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-configtype=1\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-dashboard-aggregator\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"40Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:55Z", - "generation": 1, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-dashboard-aggregator\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:55Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T23:55:20Z" - } - ], - "name": "ca-dashboard-aggregator", - "namespace": "cyberarmor-system", - "resourceVersion": "61250607", - "uid": "0ba23569-e254-4388-b22f-30cc1eca031b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-dashboard-aggregator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-configtype=1", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173", - "imagePullPolicy": "Always", - "name": "ca-dashboard-aggregator", - "resources": { - "limits": { - "cpu": "200m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "40Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:18:55Z", - "lastUpdateTime": "2021-10-12T00:19:19Z", - "message": "ReplicaSet \"ca-dashboard-aggregator-5b8bdbc8f5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-12T23:55:20Z", - "lastUpdateTime": "2021-10-12T23:55:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-notification-server\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-notification-server\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"maserNotificationServer\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\",\"value\":\"customerGUID\"},{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\",\"value\":\"8001\"},{\"name\":\"CA_NOTIFICATION_SERVER_PORT\",\"value\":\"8002\"}],\"image\":\"quay.io/armosec/notification-server-ubi:89\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-notification-server\",\"ports\":[{\"containerPort\":8001,\"name\":\"websocket\"},{\"containerPort\":8002,\"name\":\"rest-api\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:59Z", - "generation": 1, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-notification-server\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8001,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:59Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:11Z" - } - ], - "name": "ca-notification-server", - "namespace": "cyberarmor-system", - "resourceVersion": "60787036", - "uid": "8c3dc6fe-e730-4364-8445-dc5a05ad2b0f" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-notification-server" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_HOST", - "valueFrom": { - "configMapKeyRef": { - "key": "maserNotificationServer", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_ATTRIBUTES", - "value": "customerGUID" - }, - { - "name": "CA_NOTIFICATION_SERVER_WS_PORT", - "value": "8001" - }, - { - "name": "CA_NOTIFICATION_SERVER_PORT", - "value": "8002" - } - ], - "image": "quay.io/armosec/notification-server-ubi:89", - "imagePullPolicy": "Always", - "name": "ca-notification-server", - "ports": [ - { - "containerPort": 8001, - "name": "websocket", - "protocol": "TCP" - }, - { - "containerPort": 8002, - "name": "rest-api", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "50Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:11Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:59Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "ReplicaSet \"ca-notification-server-6fd966c875\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-ocimage\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-ocimage\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-ocimage:63\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-ocimage\",\"ports\":[{\"containerPort\":8080,\"name\":\"ca-ocimage-port\"}],\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:51Z", - "generation": 1, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-ocimage\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:04Z" - } - ], - "name": "ca-ocimage", - "namespace": "cyberarmor-system", - "resourceVersion": "60786986", - "uid": "a6d37edf-b144-4677-91b3-73c73d9c7df6" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-ocimage" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-ocimage:63", - "imagePullPolicy": "Always", - "name": "ca-ocimage", - "ports": [ - { - "containerPort": 8080, - "name": "ca-ocimage-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "1", - "memory": "1000Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:04Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:51Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "ReplicaSet \"ca-ocimage-5576ff7d7d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-oracle\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-oracle\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_ORACLE_PORT\",\"value\":\"4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8002\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-oracle-ubi:11\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-oracle\",\"ports\":[{\"containerPort\":4000,\"name\":\"ca-oracle\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:19:01Z", - "generation": 1, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-oracle\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:19:01Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-oracle", - "namespace": "cyberarmor-system", - "resourceVersion": "60787203", - "uid": "da3dd21c-bf13-4d2a-97da-ca80b94d08d3" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-oracle" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_ORACLE_PORT", - "value": "4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8002" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-oracle-ubi:11", - "imagePullPolicy": "Always", - "name": "ca-oracle", - "ports": [ - { - "containerPort": 4000, - "name": "ca-oracle", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:19:01Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-oracle-6c98c6bdbf\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-posture\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-posture\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8001\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-posture-ubi:112\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-posture\",\"ports\":[{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/resources/config\",\"name\":\"ca-posture-score-config\",\"readOnly\":false},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"},{\"configMap\":{\"items\":[{\"key\":\"resourcesdict.json\",\"path\":\"resourcesdict.json\"},{\"key\":\"frameworkdict.json\",\"path\":\"frameworkdict.json\"}],\"name\":\"ca-posture-score-config\"},\"name\":\"ca-posture-score-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:58Z", - "generation": 1, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-posture\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/resources/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-posture-score-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:58Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:45Z" - } - ], - "name": "ca-posture", - "namespace": "cyberarmor-system", - "resourceVersion": "60787259", - "uid": "f41f4dc1-cfb0-4201-bca7-f1cf0b72b6b7" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-posture" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8001" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-posture-ubi:112", - "imagePullPolicy": "Always", - "name": "ca-posture", - "ports": [ - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "500m", - "memory": "100Mi" - }, - "requests": { - "cpu": "100m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/resources/config", - "name": "ca-posture-score-config" - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "resourcesdict.json", - "path": "resourcesdict.json" - }, - { - "key": "frameworkdict.json", - "path": "frameworkdict.json" - } - ], - "name": "ca-posture-score-config" - }, - "name": "ca-posture-score-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:45Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:58Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "ReplicaSet \"ca-posture-5996968d7b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-rbac\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-rbac\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"S3_BUCKET\",\"value\":\"ca-kubernetes-rbac-db-dev\"},{\"name\":\"AWS_REGION\",\"value\":\"eu-west-1\"},{\"name\":\"AWS_ACCESS_KEY_ID\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keyid\",\"name\":\"ca-rbac\"}}},{\"name\":\"AWS_SECRET_ACCESS_KEY\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keysecret\",\"name\":\"ca-rbac\"}}}],\"image\":\"quay.io/armosec/k8s-ca-rbac-scanner-ubi:20\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-rbac\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"400Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:50Z", - "generation": 1, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-rbac\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AWS_ACCESS_KEY_ID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"AWS_REGION\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"AWS_SECRET_ACCESS_KEY\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"S3_BUCKET\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:13Z" - } - ], - "name": "ca-rbac", - "namespace": "cyberarmor-system", - "resourceVersion": "60787051", - "uid": "d5898a09-2489-4254-b210-0725ddb2427a" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-rbac" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "S3_BUCKET", - "value": "ca-kubernetes-rbac-db-dev" - }, - { - "name": "AWS_REGION", - "value": "eu-west-1" - }, - { - "name": "AWS_ACCESS_KEY_ID", - "valueFrom": { - "secretKeyRef": { - "key": "keyid", - "name": "ca-rbac" - } - } - }, - { - "name": "AWS_SECRET_ACCESS_KEY", - "valueFrom": { - "secretKeyRef": { - "key": "keysecret", - "name": "ca-rbac" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-rbac-scanner-ubi:20", - "imagePullPolicy": "Always", - "name": "ca-rbac", - "resources": { - "limits": { - "cpu": "200m", - "memory": "400Mi" - }, - "requests": { - "cpu": "10m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:13Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:50Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "ReplicaSet \"ca-rbac-75c8cfd6b4\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-vuln-scan\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-vuln-scan\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"EVENT_RECEIVER_URL\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\",\"value\":\"4\"}],\"image\":\"quay.io/armosec/k8s-ca-vuln-scan-ubi:84\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-vuln-scan\",\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1.5Gi\"},\"requests\":{\"cpu\":\"500m\",\"memory\":\"1Gi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:47Z", - "generation": 1, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-vuln-scan\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EVENT_RECEIVER_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:00Z" - } - ], - "name": "ca-vuln-scan", - "namespace": "cyberarmor-system", - "resourceVersion": "60786938", - "uid": "9ea3d6cb-c6c0-423f-aab2-630827939285" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-vuln-scan" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "EVENT_RECEIVER_URL", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_MAX_VULN_SCAN_ROUTINS", - "value": "4" - } - ], - "image": "quay.io/armosec/k8s-ca-vuln-scan-ubi:84", - "imagePullPolicy": "Always", - "name": "ca-vuln-scan", - "resources": { - "limits": { - "cpu": "1", - "memory": "1536Mi" - }, - "requests": { - "cpu": "500m", - "memory": "1Gi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:00Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:47Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "ReplicaSet \"ca-vuln-scan-75b499df8c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-webhook\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-webhook\"}},\"template\":{\"metadata\":{\"annotations\":{\"certificate\":\"d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt\"},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-tlsCertFile=/etc/webhook/certs/tls.crt\",\"-tlsKeyFile=/etc/webhook/certs/tls.key\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_WEBHOOK_NAME\",\"value\":\"ca-webhook\"},{\"name\":\"CA_WEBHOOK_PORT\",\"value\":\"443\"},{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_LOGIN_SECRET_NAME\",\"value\":\"ca-login\"},{\"name\":\"CA_ORACLE_SERVER\",\"value\":\"http://ca-oracle:4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"http://ca-notification-server:8001\"},{\"name\":\"CA_OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-webhook-ubi:606\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-webhook\",\"ports\":[{\"containerPort\":443,\"name\":\"mutating-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"600Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"100Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/cazips\",\"name\":\"zip-download\"},{\"mountPath\":\"/etc/webhook/certs\",\"name\":\"ca-cluster-certificate\",\"readOnly\":true},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"emptyDir\":{},\"name\":\"zip-download\"},{\"name\":\"ca-cluster-certificate\",\"secret\":{\"secretName\":\"ca-cluster-certificate\"}},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:46Z", - "generation": 1, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:certificate": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-webhook\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_LOGIN_SECRET_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/cazips\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/webhook/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-cluster-certificate\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"zip-download\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:16Z" - } - ], - "name": "ca-webhook", - "namespace": "cyberarmor-system", - "resourceVersion": "60787072", - "uid": "c968fe90-8480-471f-bdf1-fa98447ce1d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-webhook" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "certificate": "d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt" - }, - "creationTimestamp": null, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-tlsCertFile=/etc/webhook/certs/tls.crt", - "-tlsKeyFile=/etc/webhook/certs/tls.key", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_WEBHOOK_NAME", - "value": "ca-webhook" - }, - { - "name": "CA_WEBHOOK_PORT", - "value": "443" - }, - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_LOGIN_SECRET_NAME", - "value": "ca-login" - }, - { - "name": "CA_ORACLE_SERVER", - "value": "http://ca-oracle:4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "http://ca-notification-server:8001" - }, - { - "name": "CA_OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-webhook-ubi:606", - "imagePullPolicy": "Always", - "name": "ca-webhook", - "ports": [ - { - "containerPort": 443, - "name": "mutating-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "600Mi" - }, - "requests": { - "cpu": "300m", - "memory": "100Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/cazips", - "name": "zip-download" - }, - { - "mountPath": "/etc/webhook/certs", - "name": "ca-cluster-certificate", - "readOnly": true - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "emptyDir": {}, - "name": "zip-download" - }, - { - "name": "ca-cluster-certificate", - "secret": { - "defaultMode": 420, - "secretName": "ca-cluster-certificate" - } - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:16Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:46Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "ReplicaSet \"ca-webhook-7dd8bbd798\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-websocket\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-websocket\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_VULN_SCAN_SCHEDULE\",\"value\":\"@every 11h\"},{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\",\"value\":\"@every 12h\"},{\"name\":\"CA_DEBUG_SIGNER\",\"value\":null}],\"image\":\"quay.io/armosec/k8s-ca-websocket-ubi:406\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-websocket\",\"ports\":[{\"containerPort\":4002,\"name\":\"trigger-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:43Z", - "generation": 1, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-websocket\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_DEBUG_SIGNER\"}": { - ".": {}, - "f:name": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_VULN_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:14Z" - } - ], - "name": "ca-websocket", - "namespace": "cyberarmor-system", - "resourceVersion": "60787065", - "uid": "914f30e9-d858-4945-9314-cbd3422ebaab" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-websocket" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_VULN_SCAN_SCHEDULE", - "value": "@every 11h" - }, - { - "name": "CA_POSTURE_SCAN_SCHEDULE", - "value": "@every 12h" - }, - { - "name": "CA_DEBUG_SIGNER" - } - ], - "image": "quay.io/armosec/k8s-ca-websocket-ubi:406", - "imagePullPolicy": "Always", - "name": "ca-websocket", - "ports": [ - { - "containerPort": 4002, - "name": "trigger-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "1000Mi" - }, - "requests": { - "cpu": "300m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:14Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:43Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "ReplicaSet \"ca-websocket-857758846f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"adservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"adservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"adservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/adservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"name\":\"server\",\"ports\":[{\"containerPort\":9555}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"180Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:51Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":9555,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:12Z" - } - ], - "name": "adservice", - "namespace": "hipster", - "resourceVersion": "61263240", - "uid": "368bea36-82be-4c28-8607-cf931a836185" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "adservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6415784d-d96b-4866-9c10-d571c8d8fd35", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:29", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-adservice" - }, - "creationTimestamp": null, - "labels": { - "app": "adservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/adservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 9555, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "300Mi" - }, - "requests": { - "cpu": "200m", - "memory": "180Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:24Z", - "lastUpdateTime": "2021-10-12T00:12:24Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:51Z", - "lastUpdateTime": "2021-10-13T00:28:12Z", - "message": "ReplicaSet \"adservice-7864446d5c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"cartservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"cartservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"cartservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"REDIS_ADDR\",\"value\":\"redis-cart:6379\"}],\"image\":\"gcr.io/google-samples/microservices-demo/cartservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15,\"periodSeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":7070}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:47Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"REDIS_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7070,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T09:40:08Z" - } - ], - "name": "cartservice", - "namespace": "hipster", - "resourceVersion": "61443544", - "uid": "df767287-ffc1-4559-b7fd-32b09bf6208c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "cartservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "7ced7c5c-c483-40b3-b6bc-8829339dc3e1", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:04", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-cartservice" - }, - "creationTimestamp": null, - "labels": { - "app": "cartservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "REDIS_ADDR", - "value": "redis-cart:6379" - } - ], - "image": "gcr.io/google-samples/microservices-demo/cartservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7070, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "128Mi" - }, - "requests": { - "cpu": "200m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-13T00:27:35Z", - "message": "ReplicaSet \"cartservice-7c8f8f9ddd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T09:40:08Z", - "lastUpdateTime": "2021-10-13T09:40:08Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"checkoutservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"checkoutservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"checkoutservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"5050\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"PAYMENT_SERVICE_ADDR\",\"value\":\"paymentservice:50051\"},{\"name\":\"EMAIL_SERVICE_ADDR\",\"value\":\"emailservice:5000\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"}],\"image\":\"gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":5050}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:42Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EMAIL_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PAYMENT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":5050,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:42Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:41Z" - } - ], - "name": "checkoutservice", - "namespace": "hipster", - "resourceVersion": "61262985", - "uid": "b5e6a8d8-1ec6-4acc-bf14-e3bb28bff284" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "checkoutservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "bebad8bb-8728-4813-ae19-d22a38a289a5", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:28", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-checkoutservice" - }, - "creationTimestamp": null, - "labels": { - "app": "checkoutservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "5050" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "PAYMENT_SERVICE_ADDR", - "value": "paymentservice:50051" - }, - { - "name": "EMAIL_SERVICE_ADDR", - "value": "emailservice:5000" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - } - ], - "image": "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 5050, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T14:05:32Z", - "lastUpdateTime": "2021-10-12T14:05:32Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:42Z", - "lastUpdateTime": "2021-10-13T00:27:42Z", - "message": "ReplicaSet \"checkoutservice-86c564466c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"currencyservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"currencyservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"currencyservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"7000\"}],\"image\":\"gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":7000,\"name\":\"grpc\"}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T08:37:54Z" - } - ], - "name": "currencyservice", - "namespace": "hipster", - "resourceVersion": "61423238", - "uid": "167b75e1-1be2-4764-aaad-dbb1ae248d3c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "currencyservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "4aa34494-0348-4859-9e29-56df9baf52ba", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-currencyservice" - }, - "creationTimestamp": null, - "labels": { - "app": "currencyservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "7000" - } - ], - "image": "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7000, - "name": "grpc", - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:29:19Z", - "message": "ReplicaSet \"currencyservice-544b6d849c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T08:37:54Z", - "lastUpdateTime": "2021-10-13T08:37:54Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"emailservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"emailservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"emailservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"DISABLE_PROFILER\",\"value\":\"1\"}],\"image\":\"gcr.io/google-samples/microservices-demo/emailservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:41Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"DISABLE_PROFILER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:41Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:07Z" - } - ], - "name": "emailservice", - "namespace": "hipster", - "resourceVersion": "61263204", - "uid": "9959433f-c964-4e6d-a2d7-3d1b9b617948" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "emailservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "e8aa9826-2367-44e1-9aad-a6d617b0fa06", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:48", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-emailservice" - }, - "creationTimestamp": null, - "labels": { - "app": "emailservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "DISABLE_PROFILER", - "value": "1" - } - ], - "image": "gcr.io/google-samples/microservices-demo/emailservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-12T00:11:47Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:41Z", - "lastUpdateTime": "2021-10-13T00:28:08Z", - "message": "ReplicaSet \"emailservice-cc7c4cd87\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"frontend\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"frontend\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"frontend\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"},{\"name\":\"RECOMMENDATION_SERVICE_ADDR\",\"value\":\"recommendationservice:8080\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"CHECKOUT_SERVICE_ADDR\",\"value\":\"checkoutservice:5050\"},{\"name\":\"AD_SERVICE_ADDR\",\"value\":\"adservice:9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/frontend:v0.2.3\",\"livenessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-liveness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-readiness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:44Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AD_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CHECKOUT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"RECOMMENDATION_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:44Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:34Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:22Z" - } - ], - "name": "frontend", - "namespace": "hipster", - "resourceVersion": "61263336", - "uid": "86b92d9e-22ad-4f0a-be26-41343f05f0d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "frontend" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9611f05f-4a8b-48ff-9722-e6a2ec702d65", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:57", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-frontend", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "frontend", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - }, - { - "name": "RECOMMENDATION_SERVICE_ADDR", - "value": "recommendationservice:8080" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "CHECKOUT_SERVICE_ADDR", - "value": "checkoutservice:5050" - }, - { - "name": "AD_SERVICE_ADDR", - "value": "adservice:9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/frontend:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-liveness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-readiness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:04Z", - "lastUpdateTime": "2021-10-12T00:12:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:44Z", - "lastUpdateTime": "2021-10-13T00:28:23Z", - "message": "ReplicaSet \"frontend-c747f6f47\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"loadgenerator\",\"namespace\":\"hipster\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"loadgenerator\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"loadgenerator\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"FRONTEND_ADDR\",\"value\":\"frontend:80\"},{\"name\":\"USERS\",\"value\":\"10\"}],\"image\":\"gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3\",\"name\":\"main\",\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"256Mi\"}}}],\"restartPolicy\":\"Always\",\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"main\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"FRONTEND_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"USERS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:38Z" - } - ], - "name": "loadgenerator", - "namespace": "hipster", - "resourceVersion": "61263451", - "uid": "e9200650-d25d-43f2-b1bc-4615beaed50c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "loadgenerator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "baca3d0f-fdc8-42c6-a9b1-ee29b3d173e0", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:26", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-loadgenerator", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "loadgenerator", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "FRONTEND_ADDR", - "value": "frontend:80" - }, - { - "name": "USERS", - "value": "10" - } - ], - "image": "gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "name": "main", - "resources": { - "limits": { - "cpu": "500m", - "memory": "512Mi" - }, - "requests": { - "cpu": "300m", - "memory": "256Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-13T00:24:15Z", - "lastUpdateTime": "2021-10-13T00:24:15Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:28:38Z", - "message": "ReplicaSet \"loadgenerator-6dcb6ffc4f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"paymentservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"paymentservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"paymentservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:45Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:45Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:29:27Z" - } - ], - "name": "paymentservice", - "namespace": "hipster", - "resourceVersion": "61263785", - "uid": "ab21c30f-d153-4ea8-982e-e12a71745dae" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "paymentservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "60b5720d-99b5-47a0-8bc4-656b372a6d17", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:52", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-paymentservice" - }, - "creationTimestamp": null, - "labels": { - "app": "paymentservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:45Z", - "lastUpdateTime": "2021-10-13T00:29:27Z", - "message": "ReplicaSet \"paymentservice-849b876ffd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"productcatalogservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"productcatalogservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"productcatalogservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":3550}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:46Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":3550,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:57Z" - } - ], - "name": "productcatalogservice", - "namespace": "hipster", - "resourceVersion": "61263117", - "uid": "50b29b6e-0f97-43b8-9555-a53d9c0e18f9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "productcatalogservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9bb4cc06-3907-401b-919f-c2974a623068", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-productcatalogservice" - }, - "creationTimestamp": null, - "labels": { - "app": "productcatalogservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 3550, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:46Z", - "lastUpdateTime": "2021-10-13T00:27:57Z", - "message": "ReplicaSet \"productcatalogservice-586fd876d5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"recommendationservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"recommendationservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"recommendationservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"450Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"220Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:43Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:37Z" - } - ], - "name": "recommendationservice", - "namespace": "hipster", - "resourceVersion": "61263443", - "uid": "00437f28-24c4-4759-ab93-f0be948eabc9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "recommendationservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "8cace306-b3ce-4f2f-8a6f-b122873b4eee", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-recommendationservice" - }, - "creationTimestamp": null, - "labels": { - "app": "recommendationservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "450Mi" - }, - "requests": { - "cpu": "100m", - "memory": "220Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-12T00:11:50Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:43Z", - "lastUpdateTime": "2021-10-13T00:28:37Z", - "message": "ReplicaSet \"recommendationservice-54b7b7b95d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"redis-cart\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"redis-cart\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"redis-cart\"}},\"spec\":{\"containers\":[{\"image\":\"redis:alpine\",\"livenessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"name\":\"redis\",\"ports\":[{\"containerPort\":6379}],\"readinessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"resources\":{\"limits\":{\"cpu\":\"125m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"70m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/data\",\"name\":\"redis-data\"}]}],\"volumes\":[{\"emptyDir\":{},\"name\":\"redis-data\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:50Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"redis\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":6379,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/data\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"redis-data\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:38Z" - } - ], - "name": "redis-cart", - "namespace": "hipster", - "resourceVersion": "61262948", - "uid": "76b3aebb-9ec5-479e-81ae-975ccf1bc6ec" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "redis-cart" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "838a7c21-618b-4693-a13b-838a9231ca58", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-redis-cart" - }, - "creationTimestamp": null, - "labels": { - "app": "redis-cart", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "image": "redis:alpine", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "name": "redis", - "ports": [ - { - "containerPort": 6379, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "125m", - "memory": "256Mi" - }, - "requests": { - "cpu": "70m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/data", - "name": "redis-data" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "emptyDir": {}, - "name": "redis-data" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:57Z", - "lastUpdateTime": "2021-10-12T00:11:57Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-13T00:27:38Z", - "message": "ReplicaSet \"redis-cart-594778c8b9\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"shippingservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"shippingservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"shippingservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:49Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:49Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:11Z" - } - ], - "name": "shippingservice", - "namespace": "hipster", - "resourceVersion": "61262726", - "uid": "febd2fe5-0e28-448e-aabd-31904ebb82a9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "shippingservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6503b850-839c-4b73-95ab-195d27b3c10d", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:26:58", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-shippingservice" - }, - "creationTimestamp": null, - "labels": { - "app": "shippingservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:00Z", - "lastUpdateTime": "2021-10-12T00:12:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:49Z", - "lastUpdateTime": "2021-10-13T00:27:11Z", - "message": "ReplicaSet \"shippingservice-758c9b4d4b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":\"10%\",\"maxUnavailable\":0}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"kubedns\",\"prometheus.io/port\":\"10054\",\"prometheus.io/scrape\":\"true\",\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"labels\":{\"k8s-app\":\"kube-dns\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchExpressions\":[{\"key\":\"k8s-app\",\"operator\":\"In\",\"values\":[\"kube-dns\"]}]},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"--domain=cluster.local.\",\"--dns-port=10053\",\"--config-dir=/kube-dns-config\",\"--v=2\"],\"env\":[{\"name\":\"PROMETHEUS_PORT\",\"value\":\"10055\"}],\"image\":\"gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/kubedns\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"kubedns\",\"ports\":[{\"containerPort\":10053,\"name\":\"dns-local\",\"protocol\":\"UDP\"},{\"containerPort\":10053,\"name\":\"dns-tcp-local\",\"protocol\":\"TCP\"},{\"containerPort\":10055,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readiness\",\"port\":8081,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":3,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"memory\":\"210Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"70Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001},\"volumeMounts\":[{\"mountPath\":\"/kube-dns-config\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"-v=2\",\"-logtostderr\",\"-configDir=/etc/k8s/dns/dnsmasq-nanny\",\"-restartDnsmasq=true\",\"--\",\"-k\",\"--cache-size=1000\",\"--no-negcache\",\"--dns-forward-max=1500\",\"--log-facility=-\",\"--server=/cluster.local/127.0.0.1#10053\",\"--server=/in-addr.arpa/127.0.0.1#10053\",\"--server=/ip6.arpa/127.0.0.1#10053\"],\"image\":\"gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/dnsmasq\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"dnsmasq\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"150m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"capabilities\":{\"add\":[\"NET_BIND_SERVICE\",\"SETGID\"],\"drop\":[\"all\"]}},\"volumeMounts\":[{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"--v=2\",\"--logtostderr\",\"--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV\",\"--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV\"],\"image\":\"gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/metrics\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"sidecar\",\"ports\":[{\"containerPort\":10054,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001}}],\"dnsPolicy\":\"Default\",\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 4, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:scheduler.alpha.kubernetes.io/critical-pod": {}, - "f:seccomp.security.alpha.kubernetes.io/pod": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:podAntiAffinity": { - ".": {}, - "f:preferredDuringSchedulingIgnoredDuringExecution": {} - } - }, - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:capabilities": { - ".": {}, - "f:add": {}, - "f:drop": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"kubedns\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PROMETHEUS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10053,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10053,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10055,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/kube-dns-config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"sidecar\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10054,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - "f:image": {} - }, - "k:{\"name\":\"kubedns\"}": { - "f:image": {} - }, - "k:{\"name\":\"sidecar\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:06:26Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "53109905", - "uid": "cd5cca24-7cd2-4548-a5d3-d90beb79f9e8" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 2, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "10%", - "maxUnavailable": 0 - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "kubedns", - "prometheus.io/port": "10054", - "prometheus.io/scrape": "true", - "scheduler.alpha.kubernetes.io/critical-pod": "", - "seccomp.security.alpha.kubernetes.io/pod": "runtime/default" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns" - } - }, - "spec": { - "affinity": { - "podAntiAffinity": { - "preferredDuringSchedulingIgnoredDuringExecution": [ - { - "podAffinityTerm": { - "labelSelector": { - "matchExpressions": [ - { - "key": "k8s-app", - "operator": "In", - "values": [ - "kube-dns" - ] - } - ] - }, - "topologyKey": "kubernetes.io/hostname" - }, - "weight": 100 - } - ] - } - }, - "containers": [ - { - "args": [ - "--domain=cluster.local.", - "--dns-port=10053", - "--config-dir=/kube-dns-config", - "--v=2" - ], - "env": [ - { - "name": "PROMETHEUS_PORT", - "value": "10055" - } - ], - "image": "gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/kubedns", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "kubedns", - "ports": [ - { - "containerPort": 10053, - "name": "dns-local", - "protocol": "UDP" - }, - { - "containerPort": 10053, - "name": "dns-tcp-local", - "protocol": "TCP" - }, - { - "containerPort": 10055, - "name": "metrics", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/readiness", - "port": 8081, - "scheme": "HTTP" - }, - "initialDelaySeconds": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "resources": { - "limits": { - "memory": "210Mi" - }, - "requests": { - "cpu": "100m", - "memory": "70Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/kube-dns-config", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "-v=2", - "-logtostderr", - "-configDir=/etc/k8s/dns/dnsmasq-nanny", - "-restartDnsmasq=true", - "--", - "-k", - "--cache-size=1000", - "--no-negcache", - "--dns-forward-max=1500", - "--log-facility=-", - "--server=/cluster.local/127.0.0.1#10053", - "--server=/in-addr.arpa/127.0.0.1#10053", - "--server=/ip6.arpa/127.0.0.1#10053" - ], - "image": "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/dnsmasq", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "dnsmasq", - "ports": [ - { - "containerPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "150m", - "memory": "20Mi" - } - }, - "securityContext": { - "capabilities": { - "add": [ - "NET_BIND_SERVICE", - "SETGID" - ], - "drop": [ - "all" - ] - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/k8s/dns/dnsmasq-nanny", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "--v=2", - "--logtostderr", - "--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV", - "--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV" - ], - "image": "gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/metrics", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "sidecar", - "ports": [ - { - "containerPort": 10054, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns", - "serviceAccountName": "kube-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 2, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-09-11T01:57:38Z", - "message": "ReplicaSet \"kube-dns-59844ff879\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:06:26Z", - "lastUpdateTime": "2021-09-25T17:06:26Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 4, - "readyReplicas": 2, - "replicas": 2, - "updatedReplicas": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns-autoscaler\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns-autoscaler\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"spec\":{\"containers\":[{\"command\":[\"/cluster-proportional-autoscaler\",\"--namespace=kube-system\",\"--configmap=kube-dns-autoscaler\",\"--target=Deployment/kube-dns\",\"--default-params={\\\"linear\\\":{\\\"coresPerReplica\\\":256,\\\"nodesPerReplica\\\":16,\\\"preventSinglePointFailure\\\":true,\\\"includeUnschedulableNodes\\\":true}}\",\"--logtostderr=true\",\"--v=2\"],\"image\":\"gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0\",\"name\":\"autoscaler\",\"resources\":{\"requests\":{\"cpu\":\"20m\",\"memory\":\"10Mi\"}}}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"seccompProfile\":{\"type\":\"RuntimeDefault\"},\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns-autoscaler\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns-autoscaler", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"autoscaler\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:02:52Z" - } - ], - "name": "kube-dns-autoscaler", - "namespace": "kube-system", - "resourceVersion": "53108562", - "uid": "c84ce079-f3c8-46ba-871f-0f2d42ffee1e" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/cluster-proportional-autoscaler", - "--namespace=kube-system", - "--configmap=kube-dns-autoscaler", - "--target=Deployment/kube-dns", - "--default-params={\"linear\":{\"coresPerReplica\":256,\"nodesPerReplica\":16,\"preventSinglePointFailure\":true,\"includeUnschedulableNodes\":true}}", - "--logtostderr=true", - "--v=2" - ], - "image": "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "autoscaler", - "resources": { - "requests": { - "cpu": "20m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "seccompProfile": { - "type": "RuntimeDefault" - }, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns-autoscaler", - "serviceAccountName": "kube-dns-autoscaler", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:54:39Z", - "message": "ReplicaSet \"kube-dns-autoscaler-844c9d9448\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:02:52Z", - "lastUpdateTime": "2021-09-25T17:02:52Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"glbc\",\"kubernetes.io/cluster-service\":\"true\",\"kubernetes.io/name\":\"GLBC\"},\"name\":\"l7-default-backend\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"glbc\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"glbc\",\"name\":\"glbc\"}},\"spec\":{\"containers\":[{\"image\":\"k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":30,\"timeoutSeconds\":5},\"name\":\"default-http-backend\",\"ports\":[{\"containerPort\":8080}],\"resources\":{\"limits\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}}}],\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"tolerations\":[{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "glbc", - "kubernetes.io/cluster-service": "true", - "kubernetes.io/name": "GLBC" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:kubernetes.io/name": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:name": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"default-http-backend\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:seccompProfile": { - "f:type": {} - } - }, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:01:20Z" - } - ], - "name": "l7-default-backend", - "namespace": "kube-system", - "resourceVersion": "53107969", - "uid": "32a76c03-37a1-44e9-b293-dd6b46ed274b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "glbc" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "glbc", - "name": "glbc" - } - }, - "spec": { - "containers": [ - { - "image": "k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 30, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "default-http-backend", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "10m", - "memory": "20Mi" - }, - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:56:25Z", - "message": "ReplicaSet \"l7-default-backend-56cb9644f6\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:01:20Z", - "lastUpdateTime": "2021-09-25T17:01:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "24", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metrics-server\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server-v0.3.6\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server\"},\"spec\":{\"containers\":[{\"command\":[\"/metrics-server\",\"--metric-resolution=30s\",\"--kubelet-port=10255\",\"--deprecated-kubelet-completely-insecure=true\",\"--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP\"],\"image\":\"k8s.gcr.io/metrics-server-amd64:v0.3.6\",\"name\":\"metrics-server\",\"ports\":[{\"containerPort\":443,\"name\":\"https\",\"protocol\":\"TCP\"}]},{\"command\":[\"/pod_nanny\",\"--config-dir=/etc/config\",\"--cpu=40m\",\"--extra-cpu=0.5m\",\"--memory=35Mi\",\"--extra-memory=4Mi\",\"--threshold=5\",\"--deployment=metrics-server-v0.3.6\",\"--container=metrics-server\",\"--poll-period=300000\",\"--estimator=exponential\",\"--scale-down-delay=24h\",\"--minClusterSize=5\",\"--use-metrics=true\"],\"env\":[{\"name\":\"MY_POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"MY_POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"gke.gcr.io/addon-resizer:1.8.11-gke.0\",\"name\":\"metrics-server-nanny\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"5m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"metrics-server-config-volume\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"metrics-server\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"metrics-server-config\"},\"name\":\"metrics-server-config-volume\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 24, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metrics-server", - "kubernetes.io/cluster-service": "true", - "version": "v0.3.6" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:version": {} - }, - "f:name": {} - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - }, - "k:{\"name\":\"metrics-server-nanny\"}": { - ".": {}, - "f:command": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"MY_POD_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"MY_POD_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"metrics-server-config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - "f:resources": { - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - } - } - } - } - } - } - }, - "manager": "pod_nanny", - "operation": "Update", - "time": "2021-06-13T13:42:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-26T17:13:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-26T17:13:52Z" - } - ], - "name": "metrics-server-v0.3.6", - "namespace": "kube-system", - "resourceVersion": "53582788", - "uid": "872d0f34-7998-45d3-9eea-570e0a47e03c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - }, - "name": "metrics-server" - }, - "spec": { - "containers": [ - { - "command": [ - "/metrics-server", - "--metric-resolution=30s", - "--kubelet-port=10255", - "--deprecated-kubelet-completely-insecure=true", - "--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP" - ], - "image": "k8s.gcr.io/metrics-server-amd64:v0.3.6", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server", - "ports": [ - { - "containerPort": 443, - "name": "https", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "44m", - "memory": "63Mi" - }, - "requests": { - "cpu": "44m", - "memory": "63Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - }, - { - "command": [ - "/pod_nanny", - "--config-dir=/etc/config", - "--cpu=40m", - "--extra-cpu=0.5m", - "--memory=35Mi", - "--extra-memory=4Mi", - "--threshold=5", - "--deployment=metrics-server-v0.3.6", - "--container=metrics-server", - "--poll-period=300000", - "--estimator=exponential", - "--scale-down-delay=24h", - "--minClusterSize=5", - "--use-metrics=true" - ], - "env": [ - { - "name": "MY_POD_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.name" - } - } - }, - { - "name": "MY_POD_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - } - ], - "image": "gke.gcr.io/addon-resizer:1.8.11-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server-nanny", - "resources": { - "limits": { - "cpu": "100m", - "memory": "300Mi" - }, - "requests": { - "cpu": "5m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "metrics-server-config-volume" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "serviceAccount": "metrics-server", - "serviceAccountName": "metrics-server", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "metrics-server-config" - }, - "name": "metrics-server-config-volume" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-09-25T17:12:33Z", - "lastUpdateTime": "2021-09-25T17:12:33Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-06-13T13:42:20Z", - "lastUpdateTime": "2021-09-26T17:13:52Z", - "message": "ReplicaSet \"metrics-server-v0.3.6-7889654bbb\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 24, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "annotations": { - "cloud.google.com/neg": "{\"ingress\":true}", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Service\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-audit\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"ports\":[{\"port\":443,\"protocol\":\"TCP\",\"targetPort\":443}],\"selector\":{\"app\":\"ca-audit\"}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:53Z", - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:ports": { - ".": {}, - "k:{\"port\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:selector": { - ".": {}, - "f:app": {} - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:53Z" - } - ], - "name": "ca-audit", - "namespace": "cyberarmor-system", - "resourceVersion": "60786840", - "uid": "3a4e1ae6-afae-41cc-8747-64f87da47ef5" - }, - "spec": { - "clusterIP": "10.72.2.176", - "clusterIPs": [ - "10.72.2.176" - ], - "ports": [ - { - "port": 443, - "protocol": "TCP", - "targetPort": 443 - } - ], - "selector": { - "app": "ca-audit" - }, - "sessionAffinity": "None", - "type": "ClusterIP" - }, - "status": { - "loadBalancer": {} - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "annotations": { - "cloud.google.com/neg": "{\"ingress\":true}", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Service\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-notification-server\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"ports\":[{\"name\":\"websocket\",\"port\":8001,\"targetPort\":8001},{\"name\":\"rest-api\",\"port\":8002,\"targetPort\":8002}],\"selector\":{\"app\":\"ca-notification-server\"}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:59Z", - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:ports": { - ".": {}, - "k:{\"port\":8001,\"protocol\":\"TCP\"}": { - ".": {}, - "f:name": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - }, - "k:{\"port\":8002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:name": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:selector": { - ".": {}, - "f:app": {} - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:59Z" - } - ], - "name": "ca-notification-server", - "namespace": "cyberarmor-system", - "resourceVersion": "60786918", - "uid": "2f9306a8-d003-4051-8872-825b48f480a1" - }, - "spec": { - "clusterIP": "10.72.12.230", - "clusterIPs": [ - "10.72.12.230" - ], - "ports": [ - { - "name": "websocket", - "port": 8001, - "protocol": "TCP", - "targetPort": 8001 - }, - { - "name": "rest-api", - "port": 8002, - "protocol": "TCP", - "targetPort": 8002 - } - ], - "selector": { - "app": "ca-notification-server" - }, - "sessionAffinity": "None", - "type": "ClusterIP" - }, - "status": { - "loadBalancer": {} - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "annotations": { - "cloud.google.com/neg": "{\"ingress\":true}", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Service\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-ocimage\"},\"name\":\"ca-ocimage\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"ports\":[{\"port\":8080,\"targetPort\":8080}],\"selector\":{\"app\":\"ca-ocimage\"}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:51Z", - "labels": { - "app": "ca-ocimage" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:ports": { - ".": {}, - "k:{\"port\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:selector": { - ".": {}, - "f:app": {} - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:51Z" - } - ], - "name": "ca-ocimage", - "namespace": "cyberarmor-system", - "resourceVersion": "60786807", - "uid": "29d8d78b-c529-40b2-b7b3-bb224d56b874" - }, - "spec": { - "clusterIP": "10.72.13.49", - "clusterIPs": [ - "10.72.13.49" - ], - "ports": [ - { - "port": 8080, - "protocol": "TCP", - "targetPort": 8080 - } - ], - "selector": { - "app": "ca-ocimage" - }, - "sessionAffinity": "None", - "type": "ClusterIP" - }, - "status": { - "loadBalancer": {} - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "annotations": { - "cloud.google.com/neg": "{\"ingress\":true}", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Service\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-oracle\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"ports\":[{\"port\":4000,\"targetPort\":4000}],\"selector\":{\"app\":\"ca-oracle\"}}}\n" - }, - "creationTimestamp": "2021-10-12T00:19:00Z", - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:ports": { - ".": {}, - "k:{\"port\":4000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:selector": { - ".": {}, - "f:app": {} - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:19:00Z" - } - ], - "name": "ca-oracle", - "namespace": "cyberarmor-system", - "resourceVersion": "60786951", - "uid": "d43c89a4-cf91-4b45-9e55-3355bcb9c39d" - }, - "spec": { - "clusterIP": "10.72.11.61", - "clusterIPs": [ - "10.72.11.61" - ], - "ports": [ - { - "port": 4000, - "protocol": "TCP", - "targetPort": 4000 - } - ], - "selector": { - "app": "ca-oracle" - }, - "sessionAffinity": "None", - "type": "ClusterIP" - }, - "status": { - "loadBalancer": {} - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "annotations": { - "cloud.google.com/neg": "{\"ingress\":true}", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Service\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-posture\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"ports\":[{\"port\":4001,\"targetPort\":4001}],\"selector\":{\"app\":\"ca-posture\"}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:57Z", - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:ports": { - ".": {}, - "k:{\"port\":4001,\"protocol\":\"TCP\"}": { - ".": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:selector": { - ".": {}, - "f:app": {} - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:57Z" - } - ], - "name": "ca-posture", - "namespace": "cyberarmor-system", - "resourceVersion": "60786891", - "uid": "6abbbaf5-6cf5-40e7-a883-c3bb90cc071c" - }, - "spec": { - "clusterIP": "10.72.0.160", - "clusterIPs": [ - "10.72.0.160" - ], - "ports": [ - { - "port": 4001, - "protocol": "TCP", - "targetPort": 4001 - } - ], - "selector": { - "app": "ca-posture" - }, - "sessionAffinity": "None", - "type": "ClusterIP" - }, - "status": { - "loadBalancer": {} - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "annotations": { - "cloud.google.com/neg": "{\"ingress\":true}", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Service\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-vuln-scan\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"ports\":[{\"port\":8080,\"targetPort\":8080}],\"selector\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:47Z", - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:ports": { - ".": {}, - "k:{\"port\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:selector": { - ".": {}, - "f:app": {}, - "f:tier": {} - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:47Z" - } - ], - "name": "ca-vuln-scan", - "namespace": "cyberarmor-system", - "resourceVersion": "60786751", - "uid": "f48ebb05-e5bb-4a69-99ee-45aa0cd69438" - }, - "spec": { - "clusterIP": "10.72.14.65", - "clusterIPs": [ - "10.72.14.65" - ], - "ports": [ - { - "port": 8080, - "protocol": "TCP", - "targetPort": 8080 - } - ], - "selector": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - }, - "sessionAffinity": "None", - "type": "ClusterIP" - }, - "status": { - "loadBalancer": {} - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "annotations": { - "cloud.google.com/neg": "{\"ingress\":true}", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Service\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-webhook\"},\"name\":\"ca-webhook\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"ports\":[{\"name\":\"mutating-port\",\"port\":443,\"targetPort\":443}],\"selector\":{\"app\":\"ca-webhook\"}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:45Z", - "labels": { - "app": "ca-webhook" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:ports": { - ".": {}, - "k:{\"port\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:name": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:selector": { - ".": {}, - "f:app": {} - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:45Z" - } - ], - "name": "ca-webhook", - "namespace": "cyberarmor-system", - "resourceVersion": "60786723", - "uid": "84c87db8-4201-4e22-97dc-b6a742cd0ad3" - }, - "spec": { - "clusterIP": "10.72.2.2", - "clusterIPs": [ - "10.72.2.2" - ], - "ports": [ - { - "name": "mutating-port", - "port": 443, - "protocol": "TCP", - "targetPort": 443 - } - ], - "selector": { - "app": "ca-webhook" - }, - "sessionAffinity": "None", - "type": "ClusterIP" - }, - "status": { - "loadBalancer": {} - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "annotations": { - "cloud.google.com/neg": "{\"ingress\":true}", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Service\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-websocket\"},\"name\":\"ca-websocket\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"ports\":[{\"name\":\"trigger-port\",\"port\":4002,\"targetPort\":4002}],\"selector\":{\"app\":\"ca-websocket\"}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:42Z", - "labels": { - "app": "ca-websocket" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:ports": { - ".": {}, - "k:{\"port\":4002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:name": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:selector": { - ".": {}, - "f:app": {} - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:42Z" - } - ], - "name": "ca-websocket", - "namespace": "cyberarmor-system", - "resourceVersion": "60786691", - "uid": "ec1cad19-3210-4ddb-8c27-bc6255fe4717" - }, - "spec": { - "clusterIP": "10.72.0.71", - "clusterIPs": [ - "10.72.0.71" - ], - "ports": [ - { - "name": "trigger-port", - "port": 4002, - "protocol": "TCP", - "targetPort": 4002 - } - ], - "selector": { - "app": "ca-websocket" - }, - "sessionAffinity": "None", - "type": "ClusterIP" - }, - "status": { - "loadBalancer": {} - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "annotations": { - "cloud.google.com/neg": "{\"ingress\":true}" - }, - "creationTimestamp": "2021-08-17T12:56:33Z", - "labels": { - "app": "hello-world-dep" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:ports": { - ".": {}, - "k:{\"port\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:name": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:selector": { - ".": {}, - "f:app": {} - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kubectl-create", - "operation": "Update", - "time": "2021-08-17T12:56:33Z" - } - ], - "name": "hello-world-dep", - "namespace": "default", - "resourceVersion": "34447826", - "uid": "f025e9c3-f82e-473e-8230-4a0e21936e48" - }, - "spec": { - "clusterIP": "10.72.10.96", - "clusterIPs": [ - "10.72.10.96" - ], - "ports": [ - { - "name": "8080-8080", - "port": 8080, - "protocol": "TCP", - "targetPort": 8080 - } - ], - "selector": { - "app": "hello-world-dep" - }, - "sessionAffinity": "None", - "type": "ClusterIP" - }, - "status": { - "loadBalancer": {} - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "component": "apiserver", - "provider": "kubernetes" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:component": {}, - "f:provider": {} - } - }, - "f:spec": { - "f:clusterIP": {}, - "f:ports": { - ".": {}, - "k:{\"port\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:name": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "kubernetes", - "namespace": "default", - "resourceVersion": "155", - "uid": "3e8f59b4-2d63-4243-92a7-2e7f6ab84c92" - }, - "spec": { - "clusterIP": "10.72.0.1", - "clusterIPs": [ - "10.72.0.1" - ], - "ports": [ - { - "name": "https", - "port": 443, - "protocol": "TCP", - "targetPort": 443 - } - ], - "sessionAffinity": "None", - "type": "ClusterIP" - }, - "status": { - "loadBalancer": {} - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "annotations": { - "cloud.google.com/neg": "{\"ingress\":true}", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Service\",\"metadata\":{\"annotations\":{},\"name\":\"adservice\",\"namespace\":\"hipster\"},\"spec\":{\"ports\":[{\"name\":\"grpc\",\"port\":9555,\"targetPort\":9555}],\"selector\":{\"app\":\"adservice\"},\"type\":\"ClusterIP\"}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:51Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:ports": { - ".": {}, - "k:{\"port\":9555,\"protocol\":\"TCP\"}": { - ".": {}, - "f:name": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:selector": { - ".": {}, - "f:app": {} - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:51Z" - } - ], - "name": "adservice", - "namespace": "hipster", - "resourceVersion": "60784332", - "uid": "2b9b67e2-c5d2-4f08-a845-f6a904293cbf" - }, - "spec": { - "clusterIP": "10.72.12.99", - "clusterIPs": [ - "10.72.12.99" - ], - "ports": [ - { - "name": "grpc", - "port": 9555, - "protocol": "TCP", - "targetPort": 9555 - } - ], - "selector": { - "app": "adservice" - }, - "sessionAffinity": "None", - "type": "ClusterIP" - }, - "status": { - "loadBalancer": {} - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "annotations": { - "cloud.google.com/neg": "{\"ingress\":true}", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Service\",\"metadata\":{\"annotations\":{},\"name\":\"cartservice\",\"namespace\":\"hipster\"},\"spec\":{\"ports\":[{\"name\":\"grpc\",\"port\":7070,\"targetPort\":7070}],\"selector\":{\"app\":\"cartservice\"},\"type\":\"ClusterIP\"}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:47Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:ports": { - ".": {}, - "k:{\"port\":7070,\"protocol\":\"TCP\"}": { - ".": {}, - "f:name": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:selector": { - ".": {}, - "f:app": {} - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:47Z" - } - ], - "name": "cartservice", - "namespace": "hipster", - "resourceVersion": "60784218", - "uid": "827d18cb-3556-49cd-8577-b7087388cd71" - }, - "spec": { - "clusterIP": "10.72.10.12", - "clusterIPs": [ - "10.72.10.12" - ], - "ports": [ - { - "name": "grpc", - "port": 7070, - "protocol": "TCP", - "targetPort": 7070 - } - ], - "selector": { - "app": "cartservice" - }, - "sessionAffinity": "None", - "type": "ClusterIP" - }, - "status": { - "loadBalancer": {} - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "annotations": { - "cloud.google.com/neg": "{\"ingress\":true}", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Service\",\"metadata\":{\"annotations\":{},\"name\":\"checkoutservice\",\"namespace\":\"hipster\"},\"spec\":{\"ports\":[{\"name\":\"grpc\",\"port\":5050,\"targetPort\":5050}],\"selector\":{\"app\":\"checkoutservice\"},\"type\":\"ClusterIP\"}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:42Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:ports": { - ".": {}, - "k:{\"port\":5050,\"protocol\":\"TCP\"}": { - ".": {}, - "f:name": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:selector": { - ".": {}, - "f:app": {} - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:42Z" - } - ], - "name": "checkoutservice", - "namespace": "hipster", - "resourceVersion": "60784071", - "uid": "828dd163-e23b-41f1-b4e0-14aec4ec4a5e" - }, - "spec": { - "clusterIP": "10.72.13.169", - "clusterIPs": [ - "10.72.13.169" - ], - "ports": [ - { - "name": "grpc", - "port": 5050, - "protocol": "TCP", - "targetPort": 5050 - } - ], - "selector": { - "app": "checkoutservice" - }, - "sessionAffinity": "None", - "type": "ClusterIP" - }, - "status": { - "loadBalancer": {} - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "annotations": { - "cloud.google.com/neg": "{\"ingress\":true}", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Service\",\"metadata\":{\"annotations\":{},\"name\":\"currencyservice\",\"namespace\":\"hipster\"},\"spec\":{\"ports\":[{\"name\":\"grpc\",\"port\":7000,\"targetPort\":7000}],\"selector\":{\"app\":\"currencyservice\"},\"type\":\"ClusterIP\"}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:49Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:ports": { - ".": {}, - "k:{\"port\":7000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:name": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:selector": { - ".": {}, - "f:app": {} - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:49Z" - } - ], - "name": "currencyservice", - "namespace": "hipster", - "resourceVersion": "60784251", - "uid": "58a526f2-da36-4658-bc43-e4cacbe2f28d" - }, - "spec": { - "clusterIP": "10.72.10.140", - "clusterIPs": [ - "10.72.10.140" - ], - "ports": [ - { - "name": "grpc", - "port": 7000, - "protocol": "TCP", - "targetPort": 7000 - } - ], - "selector": { - "app": "currencyservice" - }, - "sessionAffinity": "None", - "type": "ClusterIP" - }, - "status": { - "loadBalancer": {} - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "annotations": { - "cloud.google.com/neg": "{\"ingress\":true}", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Service\",\"metadata\":{\"annotations\":{},\"name\":\"emailservice\",\"namespace\":\"hipster\"},\"spec\":{\"ports\":[{\"name\":\"grpc\",\"port\":5000,\"targetPort\":8080}],\"selector\":{\"app\":\"emailservice\"},\"type\":\"ClusterIP\"}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:41Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:ports": { - ".": {}, - "k:{\"port\":5000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:name": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:selector": { - ".": {}, - "f:app": {} - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:41Z" - } - ], - "name": "emailservice", - "namespace": "hipster", - "resourceVersion": "60784054", - "uid": "0e717152-da2c-4d52-ad21-966ed63b6890" - }, - "spec": { - "clusterIP": "10.72.9.172", - "clusterIPs": [ - "10.72.9.172" - ], - "ports": [ - { - "name": "grpc", - "port": 5000, - "protocol": "TCP", - "targetPort": 8080 - } - ], - "selector": { - "app": "emailservice" - }, - "sessionAffinity": "None", - "type": "ClusterIP" - }, - "status": { - "loadBalancer": {} - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "annotations": { - "cloud.google.com/neg": "{\"ingress\":true}", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Service\",\"metadata\":{\"annotations\":{},\"name\":\"frontend\",\"namespace\":\"hipster\"},\"spec\":{\"ports\":[{\"name\":\"http\",\"port\":80,\"targetPort\":8080}],\"selector\":{\"app\":\"frontend\"},\"type\":\"ClusterIP\"}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:44Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:ports": { - ".": {}, - "k:{\"port\":80,\"protocol\":\"TCP\"}": { - ".": {}, - "f:name": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:selector": { - ".": {}, - "f:app": {} - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:44Z" - } - ], - "name": "frontend", - "namespace": "hipster", - "resourceVersion": "60784123", - "uid": "1aafa9ef-8676-48d6-94e5-872b576524af" - }, - "spec": { - "clusterIP": "10.72.5.99", - "clusterIPs": [ - "10.72.5.99" - ], - "ports": [ - { - "name": "http", - "port": 80, - "protocol": "TCP", - "targetPort": 8080 - } - ], - "selector": { - "app": "frontend" - }, - "sessionAffinity": "None", - "type": "ClusterIP" - }, - "status": { - "loadBalancer": {} - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "annotations": { - "cloud.google.com/neg": "{\"ingress\":true}", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Service\",\"metadata\":{\"annotations\":{},\"name\":\"frontend-external\",\"namespace\":\"hipster\"},\"spec\":{\"ports\":[{\"name\":\"http\",\"port\":80,\"targetPort\":8080}],\"selector\":{\"app\":\"frontend\"},\"type\":\"LoadBalancer\"}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:44Z", - "finalizers": [ - "service.kubernetes.io/load-balancer-cleanup" - ], - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:externalTrafficPolicy": {}, - "f:ports": { - ".": {}, - "k:{\"port\":80,\"protocol\":\"TCP\"}": { - ".": {}, - "f:name": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:selector": { - ".": {}, - "f:app": {} - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:44Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:finalizers": { - ".": {}, - "v:\"service.kubernetes.io/load-balancer-cleanup\"": {} - } - }, - "f:status": { - "f:loadBalancer": { - "f:ingress": {} - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:12:27Z" - } - ], - "name": "frontend-external", - "namespace": "hipster", - "resourceVersion": "60784607", - "uid": "703410b8-0fa1-4265-91e1-dbe0dd84f0e0" - }, - "spec": { - "clusterIP": "10.72.12.87", - "clusterIPs": [ - "10.72.12.87" - ], - "externalTrafficPolicy": "Cluster", - "ports": [ - { - "name": "http", - "nodePort": 32158, - "port": 80, - "protocol": "TCP", - "targetPort": 8080 - } - ], - "selector": { - "app": "frontend" - }, - "sessionAffinity": "None", - "type": "LoadBalancer" - }, - "status": { - "loadBalancer": { - "ingress": [ - { - "ip": "34.78.50.211" - } - ] - } - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "annotations": { - "cloud.google.com/neg": "{\"ingress\":true}", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Service\",\"metadata\":{\"annotations\":{},\"name\":\"paymentservice\",\"namespace\":\"hipster\"},\"spec\":{\"ports\":[{\"name\":\"grpc\",\"port\":50051,\"targetPort\":50051}],\"selector\":{\"app\":\"paymentservice\"},\"type\":\"ClusterIP\"}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:45Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:ports": { - ".": {}, - "k:{\"port\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:name": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:selector": { - ".": {}, - "f:app": {} - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:45Z" - } - ], - "name": "paymentservice", - "namespace": "hipster", - "resourceVersion": "60784158", - "uid": "8faa5062-4e48-4b6b-9452-01f1d267c62b" - }, - "spec": { - "clusterIP": "10.72.15.92", - "clusterIPs": [ - "10.72.15.92" - ], - "ports": [ - { - "name": "grpc", - "port": 50051, - "protocol": "TCP", - "targetPort": 50051 - } - ], - "selector": { - "app": "paymentservice" - }, - "sessionAffinity": "None", - "type": "ClusterIP" - }, - "status": { - "loadBalancer": {} - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "annotations": { - "cloud.google.com/neg": "{\"ingress\":true}", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Service\",\"metadata\":{\"annotations\":{},\"name\":\"productcatalogservice\",\"namespace\":\"hipster\"},\"spec\":{\"ports\":[{\"name\":\"grpc\",\"port\":3550,\"targetPort\":3550}],\"selector\":{\"app\":\"productcatalogservice\"},\"type\":\"ClusterIP\"}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:46Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:ports": { - ".": {}, - "k:{\"port\":3550,\"protocol\":\"TCP\"}": { - ".": {}, - "f:name": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:selector": { - ".": {}, - "f:app": {} - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:46Z" - } - ], - "name": "productcatalogservice", - "namespace": "hipster", - "resourceVersion": "60784186", - "uid": "7c1bd9aa-982c-46c8-8982-2e35afda7a98" - }, - "spec": { - "clusterIP": "10.72.10.250", - "clusterIPs": [ - "10.72.10.250" - ], - "ports": [ - { - "name": "grpc", - "port": 3550, - "protocol": "TCP", - "targetPort": 3550 - } - ], - "selector": { - "app": "productcatalogservice" - }, - "sessionAffinity": "None", - "type": "ClusterIP" - }, - "status": { - "loadBalancer": {} - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "annotations": { - "cloud.google.com/neg": "{\"ingress\":true}", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Service\",\"metadata\":{\"annotations\":{},\"name\":\"recommendationservice\",\"namespace\":\"hipster\"},\"spec\":{\"ports\":[{\"name\":\"grpc\",\"port\":8080,\"targetPort\":8080}],\"selector\":{\"app\":\"recommendationservice\"},\"type\":\"ClusterIP\"}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:43Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:ports": { - ".": {}, - "k:{\"port\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:name": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:selector": { - ".": {}, - "f:app": {} - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:43Z" - } - ], - "name": "recommendationservice", - "namespace": "hipster", - "resourceVersion": "60784100", - "uid": "704a944c-34eb-4957-9aa7-c73297f9fdbd" - }, - "spec": { - "clusterIP": "10.72.5.170", - "clusterIPs": [ - "10.72.5.170" - ], - "ports": [ - { - "name": "grpc", - "port": 8080, - "protocol": "TCP", - "targetPort": 8080 - } - ], - "selector": { - "app": "recommendationservice" - }, - "sessionAffinity": "None", - "type": "ClusterIP" - }, - "status": { - "loadBalancer": {} - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "annotations": { - "cloud.google.com/neg": "{\"ingress\":true}", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Service\",\"metadata\":{\"annotations\":{},\"name\":\"redis-cart\",\"namespace\":\"hipster\"},\"spec\":{\"ports\":[{\"name\":\"redis\",\"port\":6379,\"targetPort\":6379}],\"selector\":{\"app\":\"redis-cart\"},\"type\":\"ClusterIP\"}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:50Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:ports": { - ".": {}, - "k:{\"port\":6379,\"protocol\":\"TCP\"}": { - ".": {}, - "f:name": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:selector": { - ".": {}, - "f:app": {} - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:50Z" - } - ], - "name": "redis-cart", - "namespace": "hipster", - "resourceVersion": "60784298", - "uid": "63f1c3b1-af45-45f5-88de-8218f5adc4b0" - }, - "spec": { - "clusterIP": "10.72.15.229", - "clusterIPs": [ - "10.72.15.229" - ], - "ports": [ - { - "name": "redis", - "port": 6379, - "protocol": "TCP", - "targetPort": 6379 - } - ], - "selector": { - "app": "redis-cart" - }, - "sessionAffinity": "None", - "type": "ClusterIP" - }, - "status": { - "loadBalancer": {} - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "annotations": { - "cloud.google.com/neg": "{\"ingress\":true}", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Service\",\"metadata\":{\"annotations\":{},\"name\":\"shippingservice\",\"namespace\":\"hipster\"},\"spec\":{\"ports\":[{\"name\":\"grpc\",\"port\":50051,\"targetPort\":50051}],\"selector\":{\"app\":\"shippingservice\"},\"type\":\"ClusterIP\"}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:49Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:ports": { - ".": {}, - "k:{\"port\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:name": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:selector": { - ".": {}, - "f:app": {} - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:49Z" - } - ], - "name": "shippingservice", - "namespace": "hipster", - "resourceVersion": "60784276", - "uid": "f2128779-f4b1-4dc5-9c49-9b12449c4712" - }, - "spec": { - "clusterIP": "10.72.1.146", - "clusterIPs": [ - "10.72.1.146" - ], - "ports": [ - { - "name": "grpc", - "port": 50051, - "protocol": "TCP", - "targetPort": 50051 - } - ], - "selector": { - "app": "shippingservice" - }, - "sessionAffinity": "None", - "type": "ClusterIP" - }, - "status": { - "loadBalancer": {} - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Service\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"glbc\",\"kubernetes.io/cluster-service\":\"true\",\"kubernetes.io/name\":\"GLBCDefaultBackend\"},\"name\":\"default-http-backend\",\"namespace\":\"kube-system\"},\"spec\":{\"ports\":[{\"name\":\"http\",\"port\":80,\"protocol\":\"TCP\",\"targetPort\":8080}],\"selector\":{\"k8s-app\":\"glbc\"},\"type\":\"NodePort\"}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "glbc", - "kubernetes.io/cluster-service": "true", - "kubernetes.io/name": "GLBCDefaultBackend" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:kubernetes.io/name": {} - } - }, - "f:spec": { - "f:externalTrafficPolicy": {}, - "f:ports": { - ".": {}, - "k:{\"port\":80,\"protocol\":\"TCP\"}": { - ".": {}, - "f:name": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:selector": { - ".": {}, - "f:k8s-app": {} - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - } - ], - "name": "default-http-backend", - "namespace": "kube-system", - "resourceVersion": "335", - "uid": "406469e3-9aa2-4020-b93e-9c4870b505e0" - }, - "spec": { - "clusterIP": "10.72.0.17", - "clusterIPs": [ - "10.72.0.17" - ], - "externalTrafficPolicy": "Cluster", - "ports": [ - { - "name": "http", - "nodePort": 31468, - "port": 80, - "protocol": "TCP", - "targetPort": 8080 - } - ], - "selector": { - "k8s-app": "glbc" - }, - "sessionAffinity": "None", - "type": "NodePort" - }, - "status": { - "loadBalancer": {} - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Service\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns\",\"kubernetes.io/cluster-service\":\"true\",\"kubernetes.io/name\":\"KubeDNS\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"clusterIP\":\"10.72.0.10\",\"ports\":[{\"name\":\"dns\",\"port\":53,\"protocol\":\"UDP\"},{\"name\":\"dns-tcp\",\"port\":53,\"protocol\":\"TCP\"}],\"selector\":{\"k8s-app\":\"kube-dns\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns", - "kubernetes.io/cluster-service": "true", - "kubernetes.io/name": "KubeDNS" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:kubernetes.io/name": {} - } - }, - "f:spec": { - "f:clusterIP": {}, - "f:ports": { - ".": {}, - "k:{\"port\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:name": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - }, - "k:{\"port\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:name": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:selector": { - ".": {}, - "f:k8s-app": {} - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "313", - "uid": "c597a083-d48c-43ed-92c2-08090412316d" - }, - "spec": { - "clusterIP": "10.72.0.10", - "clusterIPs": [ - "10.72.0.10" - ], - "ports": [ - { - "name": "dns", - "port": 53, - "protocol": "UDP", - "targetPort": 53 - }, - { - "name": "dns-tcp", - "port": 53, - "protocol": "TCP", - "targetPort": 53 - } - ], - "selector": { - "k8s-app": "kube-dns" - }, - "sessionAffinity": "None", - "type": "ClusterIP" - }, - "status": { - "loadBalancer": {} - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "annotations": { - "cloud.google.com/neg": "{\"ingress\":true}", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Service\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns\",\"kubernetes.io/cluster-service\":\"true\",\"kubernetes.io/name\":\"KubeDNSUpstream\"},\"name\":\"kube-dns-upstream\",\"namespace\":\"kube-system\"},\"spec\":{\"ports\":[{\"name\":\"dns\",\"port\":53,\"protocol\":\"UDP\",\"targetPort\":53},{\"name\":\"dns-tcp\",\"port\":53,\"protocol\":\"TCP\",\"targetPort\":53}],\"selector\":{\"k8s-app\":\"kube-dns\"}}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns", - "kubernetes.io/cluster-service": "true", - "kubernetes.io/name": "KubeDNSUpstream" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:kubernetes.io/name": {} - } - }, - "f:spec": { - "f:ports": { - ".": {}, - "k:{\"port\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:name": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - }, - "k:{\"port\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:name": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:selector": { - ".": {}, - "f:k8s-app": {} - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - } - ], - "name": "kube-dns-upstream", - "namespace": "kube-system", - "resourceVersion": "24083497", - "uid": "f2a4f6ea-b18e-4358-b114-abf45a63d7a7" - }, - "spec": { - "clusterIP": "10.72.8.174", - "clusterIPs": [ - "10.72.8.174" - ], - "ports": [ - { - "name": "dns", - "port": 53, - "protocol": "UDP", - "targetPort": 53 - }, - { - "name": "dns-tcp", - "port": 53, - "protocol": "TCP", - "targetPort": 53 - } - ], - "selector": { - "k8s-app": "kube-dns" - }, - "sessionAffinity": "None", - "type": "ClusterIP" - }, - "status": { - "loadBalancer": {} - } - }, - { - "apiVersion": "v1", - "kind": "Service", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Service\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\",\"kubernetes.io/name\":\"Metrics-server\"},\"name\":\"metrics-server\",\"namespace\":\"kube-system\"},\"spec\":{\"ports\":[{\"port\":443,\"protocol\":\"TCP\",\"targetPort\":\"https\"}],\"selector\":{\"k8s-app\":\"metrics-server\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true", - "kubernetes.io/name": "Metrics-server" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {}, - "f:kubernetes.io/name": {} - } - }, - "f:spec": { - "f:ports": { - ".": {}, - "k:{\"port\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:port": {}, - "f:protocol": {}, - "f:targetPort": {} - } - }, - "f:selector": { - ".": {}, - "f:k8s-app": {} - }, - "f:sessionAffinity": {}, - "f:type": {} - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - } - ], - "name": "metrics-server", - "namespace": "kube-system", - "resourceVersion": "401", - "uid": "fb2f2c35-3496-402c-a737-750d6c8eede4" - }, - "spec": { - "clusterIP": "10.72.15.19", - "clusterIPs": [ - "10.72.15.19" - ], - "ports": [ - { - "port": 443, - "protocol": "TCP", - "targetPort": "https" - } - ], - "selector": { - "k8s-app": "metrics-server" - }, - "sessionAffinity": "None", - "type": "ClusterIP" - }, - "status": { - "loadBalancer": {} - } - } - ], - "listInputKinds": null - } - ], - "remediation": "Update dashboard version to v2.0.1 and above.", - "description": "Kubernetes dashboard versions before v2.0.1 do not support user authentication. If exposed externally, it will allow unauthenticated remote management of the cluster. This control checks presence of the kubernetes-dashboard deployment and its version number.", - "score": 100 - }, - { - "guid": "", - "attributes": { - "armoBuiltin": true - }, - "id": "C-0016", - "controlID": "C-0016", - "name": "Allow privilege escalation", - "ruleReports": [ - { - "name": "rule-allow-privilege-escalation", - "remediation": "", - "ruleStatus": { - "status": "success", - "message": "" - }, - "ruleResponses": null, - "listInputResources": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-audit\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-audit\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CONFIG_FILES\",\"value\":\"/config/config.json\"},{\"name\":\"CA_SERVER_TYPE\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"cluster_kind\",\"name\":\"ca-audit\"}}}],\"image\":\"quay.io/armosec/k8s-ca-auditlog-ubi:21\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-audit\",\"ports\":[{\"containerPort\":443,\"name\":\"ca-audit-port\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/config\",\"name\":\"ca-audit\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-audit\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"config\",\"path\":\"config.json\"}],\"name\":\"ca-audit\"},\"name\":\"ca-audit\"},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:54Z", - "generation": 1, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CONFIG_FILES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_SERVER_TYPE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:54Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-audit", - "namespace": "cyberarmor-system", - "resourceVersion": "60787209", - "uid": "687f52ea-6956-4e8a-bb8c-7ea35a04b3f0" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-audit" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CONFIG_FILES", - "value": "/config/config.json" - }, - { - "name": "CA_SERVER_TYPE", - "valueFrom": { - "configMapKeyRef": { - "key": "cluster_kind", - "name": "ca-audit" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-auditlog-ubi:21", - "imagePullPolicy": "Always", - "name": "ca-audit", - "ports": [ - { - "containerPort": 443, - "name": "ca-audit-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/config", - "name": "ca-audit", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-audit", - "serviceAccountName": "ca-audit", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "config", - "path": "config.json" - } - ], - "name": "ca-audit" - }, - "name": "ca-audit" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:54Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-audit-c667df747\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-dashboard-aggregator\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-dashboard-aggregator\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-configtype=1\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-dashboard-aggregator\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"40Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:55Z", - "generation": 1, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-dashboard-aggregator\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:55Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T23:55:20Z" - } - ], - "name": "ca-dashboard-aggregator", - "namespace": "cyberarmor-system", - "resourceVersion": "61250607", - "uid": "0ba23569-e254-4388-b22f-30cc1eca031b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-dashboard-aggregator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-configtype=1", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173", - "imagePullPolicy": "Always", - "name": "ca-dashboard-aggregator", - "resources": { - "limits": { - "cpu": "200m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "40Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:18:55Z", - "lastUpdateTime": "2021-10-12T00:19:19Z", - "message": "ReplicaSet \"ca-dashboard-aggregator-5b8bdbc8f5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-12T23:55:20Z", - "lastUpdateTime": "2021-10-12T23:55:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-notification-server\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-notification-server\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"maserNotificationServer\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\",\"value\":\"customerGUID\"},{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\",\"value\":\"8001\"},{\"name\":\"CA_NOTIFICATION_SERVER_PORT\",\"value\":\"8002\"}],\"image\":\"quay.io/armosec/notification-server-ubi:89\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-notification-server\",\"ports\":[{\"containerPort\":8001,\"name\":\"websocket\"},{\"containerPort\":8002,\"name\":\"rest-api\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:59Z", - "generation": 1, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-notification-server\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8001,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:59Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:11Z" - } - ], - "name": "ca-notification-server", - "namespace": "cyberarmor-system", - "resourceVersion": "60787036", - "uid": "8c3dc6fe-e730-4364-8445-dc5a05ad2b0f" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-notification-server" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_HOST", - "valueFrom": { - "configMapKeyRef": { - "key": "maserNotificationServer", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_ATTRIBUTES", - "value": "customerGUID" - }, - { - "name": "CA_NOTIFICATION_SERVER_WS_PORT", - "value": "8001" - }, - { - "name": "CA_NOTIFICATION_SERVER_PORT", - "value": "8002" - } - ], - "image": "quay.io/armosec/notification-server-ubi:89", - "imagePullPolicy": "Always", - "name": "ca-notification-server", - "ports": [ - { - "containerPort": 8001, - "name": "websocket", - "protocol": "TCP" - }, - { - "containerPort": 8002, - "name": "rest-api", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "50Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:11Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:59Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "ReplicaSet \"ca-notification-server-6fd966c875\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-ocimage\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-ocimage\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-ocimage:63\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-ocimage\",\"ports\":[{\"containerPort\":8080,\"name\":\"ca-ocimage-port\"}],\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:51Z", - "generation": 1, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-ocimage\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:04Z" - } - ], - "name": "ca-ocimage", - "namespace": "cyberarmor-system", - "resourceVersion": "60786986", - "uid": "a6d37edf-b144-4677-91b3-73c73d9c7df6" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-ocimage" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-ocimage:63", - "imagePullPolicy": "Always", - "name": "ca-ocimage", - "ports": [ - { - "containerPort": 8080, - "name": "ca-ocimage-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "1", - "memory": "1000Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:04Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:51Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "ReplicaSet \"ca-ocimage-5576ff7d7d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-oracle\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-oracle\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_ORACLE_PORT\",\"value\":\"4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8002\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-oracle-ubi:11\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-oracle\",\"ports\":[{\"containerPort\":4000,\"name\":\"ca-oracle\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:19:01Z", - "generation": 1, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-oracle\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:19:01Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-oracle", - "namespace": "cyberarmor-system", - "resourceVersion": "60787203", - "uid": "da3dd21c-bf13-4d2a-97da-ca80b94d08d3" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-oracle" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_ORACLE_PORT", - "value": "4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8002" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-oracle-ubi:11", - "imagePullPolicy": "Always", - "name": "ca-oracle", - "ports": [ - { - "containerPort": 4000, - "name": "ca-oracle", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:19:01Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-oracle-6c98c6bdbf\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-posture\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-posture\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8001\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-posture-ubi:112\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-posture\",\"ports\":[{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/resources/config\",\"name\":\"ca-posture-score-config\",\"readOnly\":false},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"},{\"configMap\":{\"items\":[{\"key\":\"resourcesdict.json\",\"path\":\"resourcesdict.json\"},{\"key\":\"frameworkdict.json\",\"path\":\"frameworkdict.json\"}],\"name\":\"ca-posture-score-config\"},\"name\":\"ca-posture-score-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:58Z", - "generation": 1, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-posture\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/resources/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-posture-score-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:58Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:45Z" - } - ], - "name": "ca-posture", - "namespace": "cyberarmor-system", - "resourceVersion": "60787259", - "uid": "f41f4dc1-cfb0-4201-bca7-f1cf0b72b6b7" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-posture" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8001" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-posture-ubi:112", - "imagePullPolicy": "Always", - "name": "ca-posture", - "ports": [ - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "500m", - "memory": "100Mi" - }, - "requests": { - "cpu": "100m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/resources/config", - "name": "ca-posture-score-config" - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "resourcesdict.json", - "path": "resourcesdict.json" - }, - { - "key": "frameworkdict.json", - "path": "frameworkdict.json" - } - ], - "name": "ca-posture-score-config" - }, - "name": "ca-posture-score-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:45Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:58Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "ReplicaSet \"ca-posture-5996968d7b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-rbac\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-rbac\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"S3_BUCKET\",\"value\":\"ca-kubernetes-rbac-db-dev\"},{\"name\":\"AWS_REGION\",\"value\":\"eu-west-1\"},{\"name\":\"AWS_ACCESS_KEY_ID\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keyid\",\"name\":\"ca-rbac\"}}},{\"name\":\"AWS_SECRET_ACCESS_KEY\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keysecret\",\"name\":\"ca-rbac\"}}}],\"image\":\"quay.io/armosec/k8s-ca-rbac-scanner-ubi:20\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-rbac\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"400Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:50Z", - "generation": 1, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-rbac\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AWS_ACCESS_KEY_ID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"AWS_REGION\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"AWS_SECRET_ACCESS_KEY\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"S3_BUCKET\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:13Z" - } - ], - "name": "ca-rbac", - "namespace": "cyberarmor-system", - "resourceVersion": "60787051", - "uid": "d5898a09-2489-4254-b210-0725ddb2427a" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-rbac" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "S3_BUCKET", - "value": "ca-kubernetes-rbac-db-dev" - }, - { - "name": "AWS_REGION", - "value": "eu-west-1" - }, - { - "name": "AWS_ACCESS_KEY_ID", - "valueFrom": { - "secretKeyRef": { - "key": "keyid", - "name": "ca-rbac" - } - } - }, - { - "name": "AWS_SECRET_ACCESS_KEY", - "valueFrom": { - "secretKeyRef": { - "key": "keysecret", - "name": "ca-rbac" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-rbac-scanner-ubi:20", - "imagePullPolicy": "Always", - "name": "ca-rbac", - "resources": { - "limits": { - "cpu": "200m", - "memory": "400Mi" - }, - "requests": { - "cpu": "10m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:13Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:50Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "ReplicaSet \"ca-rbac-75c8cfd6b4\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-vuln-scan\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-vuln-scan\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"EVENT_RECEIVER_URL\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\",\"value\":\"4\"}],\"image\":\"quay.io/armosec/k8s-ca-vuln-scan-ubi:84\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-vuln-scan\",\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1.5Gi\"},\"requests\":{\"cpu\":\"500m\",\"memory\":\"1Gi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:47Z", - "generation": 1, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-vuln-scan\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EVENT_RECEIVER_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:00Z" - } - ], - "name": "ca-vuln-scan", - "namespace": "cyberarmor-system", - "resourceVersion": "60786938", - "uid": "9ea3d6cb-c6c0-423f-aab2-630827939285" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-vuln-scan" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "EVENT_RECEIVER_URL", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_MAX_VULN_SCAN_ROUTINS", - "value": "4" - } - ], - "image": "quay.io/armosec/k8s-ca-vuln-scan-ubi:84", - "imagePullPolicy": "Always", - "name": "ca-vuln-scan", - "resources": { - "limits": { - "cpu": "1", - "memory": "1536Mi" - }, - "requests": { - "cpu": "500m", - "memory": "1Gi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:00Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:47Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "ReplicaSet \"ca-vuln-scan-75b499df8c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-webhook\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-webhook\"}},\"template\":{\"metadata\":{\"annotations\":{\"certificate\":\"d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt\"},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-tlsCertFile=/etc/webhook/certs/tls.crt\",\"-tlsKeyFile=/etc/webhook/certs/tls.key\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_WEBHOOK_NAME\",\"value\":\"ca-webhook\"},{\"name\":\"CA_WEBHOOK_PORT\",\"value\":\"443\"},{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_LOGIN_SECRET_NAME\",\"value\":\"ca-login\"},{\"name\":\"CA_ORACLE_SERVER\",\"value\":\"http://ca-oracle:4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"http://ca-notification-server:8001\"},{\"name\":\"CA_OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-webhook-ubi:606\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-webhook\",\"ports\":[{\"containerPort\":443,\"name\":\"mutating-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"600Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"100Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/cazips\",\"name\":\"zip-download\"},{\"mountPath\":\"/etc/webhook/certs\",\"name\":\"ca-cluster-certificate\",\"readOnly\":true},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"emptyDir\":{},\"name\":\"zip-download\"},{\"name\":\"ca-cluster-certificate\",\"secret\":{\"secretName\":\"ca-cluster-certificate\"}},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:46Z", - "generation": 1, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:certificate": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-webhook\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_LOGIN_SECRET_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/cazips\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/webhook/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-cluster-certificate\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"zip-download\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:16Z" - } - ], - "name": "ca-webhook", - "namespace": "cyberarmor-system", - "resourceVersion": "60787072", - "uid": "c968fe90-8480-471f-bdf1-fa98447ce1d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-webhook" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "certificate": "d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt" - }, - "creationTimestamp": null, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-tlsCertFile=/etc/webhook/certs/tls.crt", - "-tlsKeyFile=/etc/webhook/certs/tls.key", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_WEBHOOK_NAME", - "value": "ca-webhook" - }, - { - "name": "CA_WEBHOOK_PORT", - "value": "443" - }, - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_LOGIN_SECRET_NAME", - "value": "ca-login" - }, - { - "name": "CA_ORACLE_SERVER", - "value": "http://ca-oracle:4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "http://ca-notification-server:8001" - }, - { - "name": "CA_OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-webhook-ubi:606", - "imagePullPolicy": "Always", - "name": "ca-webhook", - "ports": [ - { - "containerPort": 443, - "name": "mutating-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "600Mi" - }, - "requests": { - "cpu": "300m", - "memory": "100Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/cazips", - "name": "zip-download" - }, - { - "mountPath": "/etc/webhook/certs", - "name": "ca-cluster-certificate", - "readOnly": true - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "emptyDir": {}, - "name": "zip-download" - }, - { - "name": "ca-cluster-certificate", - "secret": { - "defaultMode": 420, - "secretName": "ca-cluster-certificate" - } - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:16Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:46Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "ReplicaSet \"ca-webhook-7dd8bbd798\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-websocket\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-websocket\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_VULN_SCAN_SCHEDULE\",\"value\":\"@every 11h\"},{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\",\"value\":\"@every 12h\"},{\"name\":\"CA_DEBUG_SIGNER\",\"value\":null}],\"image\":\"quay.io/armosec/k8s-ca-websocket-ubi:406\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-websocket\",\"ports\":[{\"containerPort\":4002,\"name\":\"trigger-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:43Z", - "generation": 1, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-websocket\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_DEBUG_SIGNER\"}": { - ".": {}, - "f:name": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_VULN_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:14Z" - } - ], - "name": "ca-websocket", - "namespace": "cyberarmor-system", - "resourceVersion": "60787065", - "uid": "914f30e9-d858-4945-9314-cbd3422ebaab" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-websocket" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_VULN_SCAN_SCHEDULE", - "value": "@every 11h" - }, - { - "name": "CA_POSTURE_SCAN_SCHEDULE", - "value": "@every 12h" - }, - { - "name": "CA_DEBUG_SIGNER" - } - ], - "image": "quay.io/armosec/k8s-ca-websocket-ubi:406", - "imagePullPolicy": "Always", - "name": "ca-websocket", - "ports": [ - { - "containerPort": 4002, - "name": "trigger-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "1000Mi" - }, - "requests": { - "cpu": "300m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:14Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:43Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "ReplicaSet \"ca-websocket-857758846f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"adservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"adservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"adservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/adservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"name\":\"server\",\"ports\":[{\"containerPort\":9555}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"180Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:51Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":9555,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:12Z" - } - ], - "name": "adservice", - "namespace": "hipster", - "resourceVersion": "61263240", - "uid": "368bea36-82be-4c28-8607-cf931a836185" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "adservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6415784d-d96b-4866-9c10-d571c8d8fd35", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:29", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-adservice" - }, - "creationTimestamp": null, - "labels": { - "app": "adservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/adservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 9555, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "300Mi" - }, - "requests": { - "cpu": "200m", - "memory": "180Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:24Z", - "lastUpdateTime": "2021-10-12T00:12:24Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:51Z", - "lastUpdateTime": "2021-10-13T00:28:12Z", - "message": "ReplicaSet \"adservice-7864446d5c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"cartservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"cartservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"cartservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"REDIS_ADDR\",\"value\":\"redis-cart:6379\"}],\"image\":\"gcr.io/google-samples/microservices-demo/cartservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15,\"periodSeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":7070}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:47Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"REDIS_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7070,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T09:40:08Z" - } - ], - "name": "cartservice", - "namespace": "hipster", - "resourceVersion": "61443544", - "uid": "df767287-ffc1-4559-b7fd-32b09bf6208c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "cartservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "7ced7c5c-c483-40b3-b6bc-8829339dc3e1", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:04", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-cartservice" - }, - "creationTimestamp": null, - "labels": { - "app": "cartservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "REDIS_ADDR", - "value": "redis-cart:6379" - } - ], - "image": "gcr.io/google-samples/microservices-demo/cartservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7070, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "128Mi" - }, - "requests": { - "cpu": "200m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-13T00:27:35Z", - "message": "ReplicaSet \"cartservice-7c8f8f9ddd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T09:40:08Z", - "lastUpdateTime": "2021-10-13T09:40:08Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"checkoutservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"checkoutservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"checkoutservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"5050\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"PAYMENT_SERVICE_ADDR\",\"value\":\"paymentservice:50051\"},{\"name\":\"EMAIL_SERVICE_ADDR\",\"value\":\"emailservice:5000\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"}],\"image\":\"gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":5050}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:42Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EMAIL_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PAYMENT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":5050,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:42Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:41Z" - } - ], - "name": "checkoutservice", - "namespace": "hipster", - "resourceVersion": "61262985", - "uid": "b5e6a8d8-1ec6-4acc-bf14-e3bb28bff284" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "checkoutservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "bebad8bb-8728-4813-ae19-d22a38a289a5", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:28", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-checkoutservice" - }, - "creationTimestamp": null, - "labels": { - "app": "checkoutservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "5050" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "PAYMENT_SERVICE_ADDR", - "value": "paymentservice:50051" - }, - { - "name": "EMAIL_SERVICE_ADDR", - "value": "emailservice:5000" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - } - ], - "image": "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 5050, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T14:05:32Z", - "lastUpdateTime": "2021-10-12T14:05:32Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:42Z", - "lastUpdateTime": "2021-10-13T00:27:42Z", - "message": "ReplicaSet \"checkoutservice-86c564466c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"currencyservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"currencyservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"currencyservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"7000\"}],\"image\":\"gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":7000,\"name\":\"grpc\"}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T08:37:54Z" - } - ], - "name": "currencyservice", - "namespace": "hipster", - "resourceVersion": "61423238", - "uid": "167b75e1-1be2-4764-aaad-dbb1ae248d3c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "currencyservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "4aa34494-0348-4859-9e29-56df9baf52ba", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-currencyservice" - }, - "creationTimestamp": null, - "labels": { - "app": "currencyservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "7000" - } - ], - "image": "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7000, - "name": "grpc", - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:29:19Z", - "message": "ReplicaSet \"currencyservice-544b6d849c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T08:37:54Z", - "lastUpdateTime": "2021-10-13T08:37:54Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"emailservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"emailservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"emailservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"DISABLE_PROFILER\",\"value\":\"1\"}],\"image\":\"gcr.io/google-samples/microservices-demo/emailservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:41Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"DISABLE_PROFILER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:41Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:07Z" - } - ], - "name": "emailservice", - "namespace": "hipster", - "resourceVersion": "61263204", - "uid": "9959433f-c964-4e6d-a2d7-3d1b9b617948" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "emailservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "e8aa9826-2367-44e1-9aad-a6d617b0fa06", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:48", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-emailservice" - }, - "creationTimestamp": null, - "labels": { - "app": "emailservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "DISABLE_PROFILER", - "value": "1" - } - ], - "image": "gcr.io/google-samples/microservices-demo/emailservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-12T00:11:47Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:41Z", - "lastUpdateTime": "2021-10-13T00:28:08Z", - "message": "ReplicaSet \"emailservice-cc7c4cd87\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"frontend\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"frontend\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"frontend\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"},{\"name\":\"RECOMMENDATION_SERVICE_ADDR\",\"value\":\"recommendationservice:8080\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"CHECKOUT_SERVICE_ADDR\",\"value\":\"checkoutservice:5050\"},{\"name\":\"AD_SERVICE_ADDR\",\"value\":\"adservice:9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/frontend:v0.2.3\",\"livenessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-liveness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-readiness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:44Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AD_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CHECKOUT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"RECOMMENDATION_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:44Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:34Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:22Z" - } - ], - "name": "frontend", - "namespace": "hipster", - "resourceVersion": "61263336", - "uid": "86b92d9e-22ad-4f0a-be26-41343f05f0d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "frontend" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9611f05f-4a8b-48ff-9722-e6a2ec702d65", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:57", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-frontend", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "frontend", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - }, - { - "name": "RECOMMENDATION_SERVICE_ADDR", - "value": "recommendationservice:8080" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "CHECKOUT_SERVICE_ADDR", - "value": "checkoutservice:5050" - }, - { - "name": "AD_SERVICE_ADDR", - "value": "adservice:9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/frontend:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-liveness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-readiness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:04Z", - "lastUpdateTime": "2021-10-12T00:12:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:44Z", - "lastUpdateTime": "2021-10-13T00:28:23Z", - "message": "ReplicaSet \"frontend-c747f6f47\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"loadgenerator\",\"namespace\":\"hipster\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"loadgenerator\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"loadgenerator\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"FRONTEND_ADDR\",\"value\":\"frontend:80\"},{\"name\":\"USERS\",\"value\":\"10\"}],\"image\":\"gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3\",\"name\":\"main\",\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"256Mi\"}}}],\"restartPolicy\":\"Always\",\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"main\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"FRONTEND_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"USERS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:38Z" - } - ], - "name": "loadgenerator", - "namespace": "hipster", - "resourceVersion": "61263451", - "uid": "e9200650-d25d-43f2-b1bc-4615beaed50c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "loadgenerator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "baca3d0f-fdc8-42c6-a9b1-ee29b3d173e0", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:26", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-loadgenerator", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "loadgenerator", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "FRONTEND_ADDR", - "value": "frontend:80" - }, - { - "name": "USERS", - "value": "10" - } - ], - "image": "gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "name": "main", - "resources": { - "limits": { - "cpu": "500m", - "memory": "512Mi" - }, - "requests": { - "cpu": "300m", - "memory": "256Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-13T00:24:15Z", - "lastUpdateTime": "2021-10-13T00:24:15Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:28:38Z", - "message": "ReplicaSet \"loadgenerator-6dcb6ffc4f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"paymentservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"paymentservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"paymentservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:45Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:45Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:29:27Z" - } - ], - "name": "paymentservice", - "namespace": "hipster", - "resourceVersion": "61263785", - "uid": "ab21c30f-d153-4ea8-982e-e12a71745dae" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "paymentservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "60b5720d-99b5-47a0-8bc4-656b372a6d17", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:52", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-paymentservice" - }, - "creationTimestamp": null, - "labels": { - "app": "paymentservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:45Z", - "lastUpdateTime": "2021-10-13T00:29:27Z", - "message": "ReplicaSet \"paymentservice-849b876ffd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"productcatalogservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"productcatalogservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"productcatalogservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":3550}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:46Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":3550,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:57Z" - } - ], - "name": "productcatalogservice", - "namespace": "hipster", - "resourceVersion": "61263117", - "uid": "50b29b6e-0f97-43b8-9555-a53d9c0e18f9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "productcatalogservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9bb4cc06-3907-401b-919f-c2974a623068", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-productcatalogservice" - }, - "creationTimestamp": null, - "labels": { - "app": "productcatalogservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 3550, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:46Z", - "lastUpdateTime": "2021-10-13T00:27:57Z", - "message": "ReplicaSet \"productcatalogservice-586fd876d5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"recommendationservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"recommendationservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"recommendationservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"450Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"220Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:43Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:37Z" - } - ], - "name": "recommendationservice", - "namespace": "hipster", - "resourceVersion": "61263443", - "uid": "00437f28-24c4-4759-ab93-f0be948eabc9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "recommendationservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "8cace306-b3ce-4f2f-8a6f-b122873b4eee", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-recommendationservice" - }, - "creationTimestamp": null, - "labels": { - "app": "recommendationservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "450Mi" - }, - "requests": { - "cpu": "100m", - "memory": "220Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-12T00:11:50Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:43Z", - "lastUpdateTime": "2021-10-13T00:28:37Z", - "message": "ReplicaSet \"recommendationservice-54b7b7b95d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"redis-cart\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"redis-cart\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"redis-cart\"}},\"spec\":{\"containers\":[{\"image\":\"redis:alpine\",\"livenessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"name\":\"redis\",\"ports\":[{\"containerPort\":6379}],\"readinessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"resources\":{\"limits\":{\"cpu\":\"125m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"70m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/data\",\"name\":\"redis-data\"}]}],\"volumes\":[{\"emptyDir\":{},\"name\":\"redis-data\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:50Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"redis\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":6379,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/data\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"redis-data\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:38Z" - } - ], - "name": "redis-cart", - "namespace": "hipster", - "resourceVersion": "61262948", - "uid": "76b3aebb-9ec5-479e-81ae-975ccf1bc6ec" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "redis-cart" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "838a7c21-618b-4693-a13b-838a9231ca58", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-redis-cart" - }, - "creationTimestamp": null, - "labels": { - "app": "redis-cart", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "image": "redis:alpine", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "name": "redis", - "ports": [ - { - "containerPort": 6379, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "125m", - "memory": "256Mi" - }, - "requests": { - "cpu": "70m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/data", - "name": "redis-data" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "emptyDir": {}, - "name": "redis-data" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:57Z", - "lastUpdateTime": "2021-10-12T00:11:57Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-13T00:27:38Z", - "message": "ReplicaSet \"redis-cart-594778c8b9\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"shippingservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"shippingservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"shippingservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:49Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:49Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:11Z" - } - ], - "name": "shippingservice", - "namespace": "hipster", - "resourceVersion": "61262726", - "uid": "febd2fe5-0e28-448e-aabd-31904ebb82a9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "shippingservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6503b850-839c-4b73-95ab-195d27b3c10d", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:26:58", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-shippingservice" - }, - "creationTimestamp": null, - "labels": { - "app": "shippingservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:00Z", - "lastUpdateTime": "2021-10-12T00:12:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:49Z", - "lastUpdateTime": "2021-10-13T00:27:11Z", - "message": "ReplicaSet \"shippingservice-758c9b4d4b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":\"10%\",\"maxUnavailable\":0}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"kubedns\",\"prometheus.io/port\":\"10054\",\"prometheus.io/scrape\":\"true\",\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"labels\":{\"k8s-app\":\"kube-dns\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchExpressions\":[{\"key\":\"k8s-app\",\"operator\":\"In\",\"values\":[\"kube-dns\"]}]},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"--domain=cluster.local.\",\"--dns-port=10053\",\"--config-dir=/kube-dns-config\",\"--v=2\"],\"env\":[{\"name\":\"PROMETHEUS_PORT\",\"value\":\"10055\"}],\"image\":\"gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/kubedns\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"kubedns\",\"ports\":[{\"containerPort\":10053,\"name\":\"dns-local\",\"protocol\":\"UDP\"},{\"containerPort\":10053,\"name\":\"dns-tcp-local\",\"protocol\":\"TCP\"},{\"containerPort\":10055,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readiness\",\"port\":8081,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":3,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"memory\":\"210Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"70Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001},\"volumeMounts\":[{\"mountPath\":\"/kube-dns-config\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"-v=2\",\"-logtostderr\",\"-configDir=/etc/k8s/dns/dnsmasq-nanny\",\"-restartDnsmasq=true\",\"--\",\"-k\",\"--cache-size=1000\",\"--no-negcache\",\"--dns-forward-max=1500\",\"--log-facility=-\",\"--server=/cluster.local/127.0.0.1#10053\",\"--server=/in-addr.arpa/127.0.0.1#10053\",\"--server=/ip6.arpa/127.0.0.1#10053\"],\"image\":\"gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/dnsmasq\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"dnsmasq\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"150m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"capabilities\":{\"add\":[\"NET_BIND_SERVICE\",\"SETGID\"],\"drop\":[\"all\"]}},\"volumeMounts\":[{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"--v=2\",\"--logtostderr\",\"--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV\",\"--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV\"],\"image\":\"gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/metrics\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"sidecar\",\"ports\":[{\"containerPort\":10054,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001}}],\"dnsPolicy\":\"Default\",\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 4, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:scheduler.alpha.kubernetes.io/critical-pod": {}, - "f:seccomp.security.alpha.kubernetes.io/pod": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:podAntiAffinity": { - ".": {}, - "f:preferredDuringSchedulingIgnoredDuringExecution": {} - } - }, - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:capabilities": { - ".": {}, - "f:add": {}, - "f:drop": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"kubedns\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PROMETHEUS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10053,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10053,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10055,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/kube-dns-config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"sidecar\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10054,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - "f:image": {} - }, - "k:{\"name\":\"kubedns\"}": { - "f:image": {} - }, - "k:{\"name\":\"sidecar\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:06:26Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "53109905", - "uid": "cd5cca24-7cd2-4548-a5d3-d90beb79f9e8" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 2, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "10%", - "maxUnavailable": 0 - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "kubedns", - "prometheus.io/port": "10054", - "prometheus.io/scrape": "true", - "scheduler.alpha.kubernetes.io/critical-pod": "", - "seccomp.security.alpha.kubernetes.io/pod": "runtime/default" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns" - } - }, - "spec": { - "affinity": { - "podAntiAffinity": { - "preferredDuringSchedulingIgnoredDuringExecution": [ - { - "podAffinityTerm": { - "labelSelector": { - "matchExpressions": [ - { - "key": "k8s-app", - "operator": "In", - "values": [ - "kube-dns" - ] - } - ] - }, - "topologyKey": "kubernetes.io/hostname" - }, - "weight": 100 - } - ] - } - }, - "containers": [ - { - "args": [ - "--domain=cluster.local.", - "--dns-port=10053", - "--config-dir=/kube-dns-config", - "--v=2" - ], - "env": [ - { - "name": "PROMETHEUS_PORT", - "value": "10055" - } - ], - "image": "gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/kubedns", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "kubedns", - "ports": [ - { - "containerPort": 10053, - "name": "dns-local", - "protocol": "UDP" - }, - { - "containerPort": 10053, - "name": "dns-tcp-local", - "protocol": "TCP" - }, - { - "containerPort": 10055, - "name": "metrics", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/readiness", - "port": 8081, - "scheme": "HTTP" - }, - "initialDelaySeconds": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "resources": { - "limits": { - "memory": "210Mi" - }, - "requests": { - "cpu": "100m", - "memory": "70Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/kube-dns-config", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "-v=2", - "-logtostderr", - "-configDir=/etc/k8s/dns/dnsmasq-nanny", - "-restartDnsmasq=true", - "--", - "-k", - "--cache-size=1000", - "--no-negcache", - "--dns-forward-max=1500", - "--log-facility=-", - "--server=/cluster.local/127.0.0.1#10053", - "--server=/in-addr.arpa/127.0.0.1#10053", - "--server=/ip6.arpa/127.0.0.1#10053" - ], - "image": "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/dnsmasq", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "dnsmasq", - "ports": [ - { - "containerPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "150m", - "memory": "20Mi" - } - }, - "securityContext": { - "capabilities": { - "add": [ - "NET_BIND_SERVICE", - "SETGID" - ], - "drop": [ - "all" - ] - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/k8s/dns/dnsmasq-nanny", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "--v=2", - "--logtostderr", - "--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV", - "--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV" - ], - "image": "gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/metrics", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "sidecar", - "ports": [ - { - "containerPort": 10054, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns", - "serviceAccountName": "kube-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 2, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-09-11T01:57:38Z", - "message": "ReplicaSet \"kube-dns-59844ff879\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:06:26Z", - "lastUpdateTime": "2021-09-25T17:06:26Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 4, - "readyReplicas": 2, - "replicas": 2, - "updatedReplicas": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns-autoscaler\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns-autoscaler\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"spec\":{\"containers\":[{\"command\":[\"/cluster-proportional-autoscaler\",\"--namespace=kube-system\",\"--configmap=kube-dns-autoscaler\",\"--target=Deployment/kube-dns\",\"--default-params={\\\"linear\\\":{\\\"coresPerReplica\\\":256,\\\"nodesPerReplica\\\":16,\\\"preventSinglePointFailure\\\":true,\\\"includeUnschedulableNodes\\\":true}}\",\"--logtostderr=true\",\"--v=2\"],\"image\":\"gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0\",\"name\":\"autoscaler\",\"resources\":{\"requests\":{\"cpu\":\"20m\",\"memory\":\"10Mi\"}}}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"seccompProfile\":{\"type\":\"RuntimeDefault\"},\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns-autoscaler\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns-autoscaler", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"autoscaler\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:02:52Z" - } - ], - "name": "kube-dns-autoscaler", - "namespace": "kube-system", - "resourceVersion": "53108562", - "uid": "c84ce079-f3c8-46ba-871f-0f2d42ffee1e" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/cluster-proportional-autoscaler", - "--namespace=kube-system", - "--configmap=kube-dns-autoscaler", - "--target=Deployment/kube-dns", - "--default-params={\"linear\":{\"coresPerReplica\":256,\"nodesPerReplica\":16,\"preventSinglePointFailure\":true,\"includeUnschedulableNodes\":true}}", - "--logtostderr=true", - "--v=2" - ], - "image": "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "autoscaler", - "resources": { - "requests": { - "cpu": "20m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "seccompProfile": { - "type": "RuntimeDefault" - }, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns-autoscaler", - "serviceAccountName": "kube-dns-autoscaler", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:54:39Z", - "message": "ReplicaSet \"kube-dns-autoscaler-844c9d9448\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:02:52Z", - "lastUpdateTime": "2021-09-25T17:02:52Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"glbc\",\"kubernetes.io/cluster-service\":\"true\",\"kubernetes.io/name\":\"GLBC\"},\"name\":\"l7-default-backend\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"glbc\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"glbc\",\"name\":\"glbc\"}},\"spec\":{\"containers\":[{\"image\":\"k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":30,\"timeoutSeconds\":5},\"name\":\"default-http-backend\",\"ports\":[{\"containerPort\":8080}],\"resources\":{\"limits\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}}}],\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"tolerations\":[{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "glbc", - "kubernetes.io/cluster-service": "true", - "kubernetes.io/name": "GLBC" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:kubernetes.io/name": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:name": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"default-http-backend\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:seccompProfile": { - "f:type": {} - } - }, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:01:20Z" - } - ], - "name": "l7-default-backend", - "namespace": "kube-system", - "resourceVersion": "53107969", - "uid": "32a76c03-37a1-44e9-b293-dd6b46ed274b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "glbc" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "glbc", - "name": "glbc" - } - }, - "spec": { - "containers": [ - { - "image": "k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 30, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "default-http-backend", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "10m", - "memory": "20Mi" - }, - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:56:25Z", - "message": "ReplicaSet \"l7-default-backend-56cb9644f6\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:01:20Z", - "lastUpdateTime": "2021-09-25T17:01:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "24", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metrics-server\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server-v0.3.6\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server\"},\"spec\":{\"containers\":[{\"command\":[\"/metrics-server\",\"--metric-resolution=30s\",\"--kubelet-port=10255\",\"--deprecated-kubelet-completely-insecure=true\",\"--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP\"],\"image\":\"k8s.gcr.io/metrics-server-amd64:v0.3.6\",\"name\":\"metrics-server\",\"ports\":[{\"containerPort\":443,\"name\":\"https\",\"protocol\":\"TCP\"}]},{\"command\":[\"/pod_nanny\",\"--config-dir=/etc/config\",\"--cpu=40m\",\"--extra-cpu=0.5m\",\"--memory=35Mi\",\"--extra-memory=4Mi\",\"--threshold=5\",\"--deployment=metrics-server-v0.3.6\",\"--container=metrics-server\",\"--poll-period=300000\",\"--estimator=exponential\",\"--scale-down-delay=24h\",\"--minClusterSize=5\",\"--use-metrics=true\"],\"env\":[{\"name\":\"MY_POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"MY_POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"gke.gcr.io/addon-resizer:1.8.11-gke.0\",\"name\":\"metrics-server-nanny\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"5m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"metrics-server-config-volume\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"metrics-server\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"metrics-server-config\"},\"name\":\"metrics-server-config-volume\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 24, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metrics-server", - "kubernetes.io/cluster-service": "true", - "version": "v0.3.6" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:version": {} - }, - "f:name": {} - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - }, - "k:{\"name\":\"metrics-server-nanny\"}": { - ".": {}, - "f:command": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"MY_POD_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"MY_POD_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"metrics-server-config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - "f:resources": { - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - } - } - } - } - } - } - }, - "manager": "pod_nanny", - "operation": "Update", - "time": "2021-06-13T13:42:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-26T17:13:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-26T17:13:52Z" - } - ], - "name": "metrics-server-v0.3.6", - "namespace": "kube-system", - "resourceVersion": "53582788", - "uid": "872d0f34-7998-45d3-9eea-570e0a47e03c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - }, - "name": "metrics-server" - }, - "spec": { - "containers": [ - { - "command": [ - "/metrics-server", - "--metric-resolution=30s", - "--kubelet-port=10255", - "--deprecated-kubelet-completely-insecure=true", - "--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP" - ], - "image": "k8s.gcr.io/metrics-server-amd64:v0.3.6", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server", - "ports": [ - { - "containerPort": 443, - "name": "https", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "44m", - "memory": "63Mi" - }, - "requests": { - "cpu": "44m", - "memory": "63Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - }, - { - "command": [ - "/pod_nanny", - "--config-dir=/etc/config", - "--cpu=40m", - "--extra-cpu=0.5m", - "--memory=35Mi", - "--extra-memory=4Mi", - "--threshold=5", - "--deployment=metrics-server-v0.3.6", - "--container=metrics-server", - "--poll-period=300000", - "--estimator=exponential", - "--scale-down-delay=24h", - "--minClusterSize=5", - "--use-metrics=true" - ], - "env": [ - { - "name": "MY_POD_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.name" - } - } - }, - { - "name": "MY_POD_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - } - ], - "image": "gke.gcr.io/addon-resizer:1.8.11-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server-nanny", - "resources": { - "limits": { - "cpu": "100m", - "memory": "300Mi" - }, - "requests": { - "cpu": "5m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "metrics-server-config-volume" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "serviceAccount": "metrics-server", - "serviceAccountName": "metrics-server", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "metrics-server-config" - }, - "name": "metrics-server-config-volume" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-09-25T17:12:33Z", - "lastUpdateTime": "2021-09-25T17:12:33Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-06-13T13:42:20Z", - "lastUpdateTime": "2021-09-26T17:13:52Z", - "message": "ReplicaSet \"metrics-server-v0.3.6-7889654bbb\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 24, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "6", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-proxy\"},\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-proxy\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-proxy\"}},\"spec\":{\"containers\":[{\"command\":[\"/bin/sh\",\"-c\",\"kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\\u003e\\u003e/var/log/kube-proxy.log 2\\u003e\\u00261\"],\"env\":[{\"name\":\"KUBERNETES_SERVICE_HOST\",\"value\":\"34.78.97.243\"}],\"image\":\"gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001\",\"name\":\"kube-proxy\",\"resources\":{\"requests\":{\"cpu\":\"100m\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/log\",\"name\":\"varlog\",\"readOnly\":false},{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/lib/modules\",\"name\":\"lib-modules\",\"readOnly\":true}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\",\"node.kubernetes.io/kube-proxy-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"kube-proxy\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/log\"},\"name\":\"varlog\"},{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"hostPath\":{\"path\":\"/lib/modules\"},\"name\":\"lib-modules\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "generation": 6, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-proxy" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBERNETES_SERVICE_HOST\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/kube-proxy-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - "f:command": {}, - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:44Z" - } - ], - "name": "kube-proxy", - "namespace": "kube-system", - "resourceVersion": "52161714", - "uid": "bb6f9ab0-e586-407b-95c0-773637c696e8" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-proxy" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-proxy" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "env": [ - { - "name": "KUBERNETES_SERVICE_HOST", - "value": "34.78.97.243" - } - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux", - "node.kubernetes.io/kube-proxy-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "kube-proxy", - "serviceAccountName": "kube-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 6 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"},\"name\":\"metadata-proxy-v0.1\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metadata-proxy\",\"version\":\"v0.1\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"}},\"spec\":{\"containers\":[{\"args\":[\"--addr=0.0.0.0:988\"],\"image\":\"k8s.gcr.io/metadata-proxy:v0.1.12\",\"name\":\"metadata-proxy\",\"resources\":{\"limits\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"},\"requests\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"}},\"securityContext\":{\"privileged\":true}}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"cloud.google.com/metadata-proxy-ready\":\"true\",\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"metadata-proxy\",\"terminationGracePeriodSeconds\":30,\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 3, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:cloud.google.com/metadata-proxy-ready": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - "f:args": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - } - ], - "name": "metadata-proxy-v0.1", - "namespace": "kube-system", - "resourceVersion": "25934435", - "uid": "94bf5845-f77b-47d4-bcec-e78549b4d8a3" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metadata-proxy", - "version": "v0.1" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--addr=0.0.0.0:988" - ], - "image": "k8s.gcr.io/metadata-proxy:v0.1.12", - "imagePullPolicy": "IfNotPresent", - "name": "metadata-proxy", - "resources": { - "limits": { - "cpu": "30m", - "memory": "25Mi" - }, - "requests": { - "cpu": "30m", - "memory": "25Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "cloud.google.com/metadata-proxy-ready": "true", - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "metadata-proxy", - "serviceAccountName": "metadata-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 3 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"node-local-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"node-local-dns\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"nodelocaldns\",\"components.gke.io/component-version\":\"1.4.0\",\"prometheus.io/port\":\"9253\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"k8s-app\":\"node-local-dns\"}},\"spec\":{\"containers\":[{\"args\":[\"-localip\",\"169.254.20.10,10.72.0.10\",\"-conf\",\"/etc/Corefile\",\"-upstreamsvc\",\"kube-dns-upstream\",\"-kubednscm\",\"/etc/kube-dns\"],\"image\":\"gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1\",\"livenessProbe\":{\"httpGet\":{\"host\":\"169.254.20.10\",\"path\":\"/health\",\"port\":8080},\"initialDelaySeconds\":60,\"timeoutSeconds\":5},\"name\":\"node-cache\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"},{\"containerPort\":9253,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"25m\",\"memory\":\"5Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/etc/coredns\",\"name\":\"config-volume\"},{\"mountPath\":\"/etc/kube-dns\",\"name\":\"kube-dns-config\"}]}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"addon.gke.io/node-local-dns-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"node-local-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"},{\"configMap\":{\"items\":[{\"key\":\"Corefile\",\"path\":\"Corefile.base\"}],\"name\":\"node-local-dns\"},\"name\":\"config-volume\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"}}}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "node-local-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:host": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":9253,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/coredns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/kube-dns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:addon.gke.io/node-local-dns-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "53114241", - "uid": "5069e9ba-0784-41bf-9577-3757bcb3b6d6" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "node-local-dns" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "nodelocaldns", - "components.gke.io/component-version": "1.4.0", - "prometheus.io/port": "9253", - "prometheus.io/scrape": "true" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "node-local-dns" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-localip", - "169.254.20.10,10.72.0.10", - "-conf", - "/etc/Corefile", - "-upstreamsvc", - "kube-dns-upstream", - "-kubednscm", - "/etc/kube-dns" - ], - "image": "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "host": "169.254.20.10", - "path": "/health", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "node-cache", - "ports": [ - { - "containerPort": 53, - "hostPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "hostPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - }, - { - "containerPort": 9253, - "hostPort": 9253, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "25m", - "memory": "5Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/etc/coredns", - "name": "config-volume" - }, - { - "mountPath": "/etc/kube-dns", - "name": "kube-dns-config" - } - ] - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "addon.gke.io/node-local-dns-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "node-local-dns", - "serviceAccountName": "node-local-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "Corefile", - "path": "Corefile.base" - } - ], - "name": "node-local-dns" - }, - "name": "config-volume" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 2, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"nvidia-gpu-device-plugin\"},\"name\":\"nvidia-gpu-device-plugin\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"cloud.google.com/gke-accelerator\",\"operator\":\"Exists\"}]}]}}},\"containers\":[{\"command\":[\"/usr/bin/nvidia-gpu-device-plugin\",\"-logtostderr\",\"--enable-container-gpu-metrics\",\"--enable-health-monitoring\"],\"env\":[{\"name\":\"LD_LIBRARY_PATH\",\"value\":\"/usr/local/nvidia/lib64\"}],\"image\":\"gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317\",\"name\":\"nvidia-gpu-device-plugin\",\"ports\":[{\"containerPort\":2112,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/device-plugin\",\"name\":\"device-plugin\"},{\"mountPath\":\"/dev\",\"name\":\"dev\"},{\"mountPath\":\"/usr/local/nvidia\",\"name\":\"nvidia\"},{\"mountPath\":\"/var/lib/kubelet/pod-resources\",\"name\":\"pod-resources\"},{\"mountPath\":\"/proc\",\"name\":\"proc\"},{\"mountPath\":\"/etc/nvidia\",\"name\":\"nvidia-config\"}]}],\"priorityClassName\":\"system-node-critical\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/device-plugins\"},\"name\":\"device-plugin\"},{\"hostPath\":{\"path\":\"/dev\"},\"name\":\"dev\"},{\"hostPath\":{\"path\":\"/home/kubernetes/bin/nvidia\",\"type\":\"Directory\"},\"name\":\"nvidia\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/pod-resources\"},\"name\":\"pod-resources\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"proc\"},{\"hostPath\":{\"path\":\"/etc/nvidia\"},\"name\":\"nvidia-config\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:17Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "nvidia-gpu-device-plugin" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:nodeAffinity": { - ".": {}, - "f:requiredDuringSchedulingIgnoredDuringExecution": { - ".": {}, - "f:nodeSelectorTerms": {} - } - } - }, - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"LD_LIBRARY_PATH\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":2112,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/device-plugin\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/local/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet/pod-resources\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"dev\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"device-plugin\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"nvidia\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"pod-resources\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - "f:command": {}, - "f:image": {}, - "f:volumeMounts": { - "k:{\"mountPath\":\"/etc/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/proc\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:volumes": { - "k:{\"name\":\"nvidia-config\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"proc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "nvidia-gpu-device-plugin", - "namespace": "kube-system", - "resourceVersion": "25934477", - "uid": "14396a20-ecee-4671-aefe-2a5b9d2e0dde" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "spec": { - "affinity": { - "nodeAffinity": { - "requiredDuringSchedulingIgnoredDuringExecution": { - "nodeSelectorTerms": [ - { - "matchExpressions": [ - { - "key": "cloud.google.com/gke-accelerator", - "operator": "Exists" - } - ] - } - ] - } - } - }, - "containers": [ - { - "command": [ - "/usr/bin/nvidia-gpu-device-plugin", - "-logtostderr", - "--enable-container-gpu-metrics", - "--enable-health-monitoring" - ], - "env": [ - { - "name": "LD_LIBRARY_PATH", - "value": "/usr/local/nvidia/lib64" - } - ], - "image": "gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317", - "imagePullPolicy": "IfNotPresent", - "name": "nvidia-gpu-device-plugin", - "ports": [ - { - "containerPort": 2112, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "20Mi" - }, - "requests": { - "cpu": "50m", - "memory": "20Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/device-plugin", - "name": "device-plugin" - }, - { - "mountPath": "/dev", - "name": "dev" - }, - { - "mountPath": "/usr/local/nvidia", - "name": "nvidia" - }, - { - "mountPath": "/var/lib/kubelet/pod-resources", - "name": "pod-resources" - }, - { - "mountPath": "/proc", - "name": "proc" - }, - { - "mountPath": "/etc/nvidia", - "name": "nvidia-config" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/device-plugins", - "type": "" - }, - "name": "device-plugin" - }, - { - "hostPath": { - "path": "/dev", - "type": "" - }, - "name": "dev" - }, - { - "hostPath": { - "path": "/home/kubernetes/bin/nvidia", - "type": "Directory" - }, - "name": "nvidia" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/pod-resources", - "type": "" - }, - "name": "pod-resources" - }, - { - "hostPath": { - "path": "/proc", - "type": "" - }, - "name": "proc" - }, - { - "hostPath": { - "path": "/etc/nvidia", - "type": "" - }, - "name": "nvidia-config" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:02:45.009201226Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:02:48Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"6de798cc-d558-479a-8ef4-38363e434633\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.63\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:02:55Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-5naq", - "uid": "6de798cc-d558-479a-8ef4-38363e434633" - } - ], - "resourceVersion": "53108585", - "uid": "fdd66d80-d09d-4b43-a291-b3797c7a5864" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-5naq", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://50767376b8a42b7a390e84c5c451d1485b1a562873b915100dc605bbcc49c1c5", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:02:48Z" - } - } - } - ], - "hostIP": "10.132.0.63", - "phase": "Running", - "podIP": "10.132.0.63", - "podIPs": [ - { - "ip": "10.132.0.63" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:02:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:09:05.595580038Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:09:09Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"d288c56c-2a00-42fe-b2ea-b8761fec2a4e\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.193\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:09:16Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-abj3", - "uid": "d288c56c-2a00-42fe-b2ea-b8761fec2a4e" - } - ], - "resourceVersion": "53110982", - "uid": "0866b060-d7a6-40bc-9ed9-292fbce958e9" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-abj3", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b04121a3de085254493b48dbe1be551abd021877d1c098afbd19e6429df8f4ba", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:09:08Z" - } - } - } - ], - "hostIP": "10.132.15.193", - "phase": "Running", - "podIP": "10.132.15.193", - "podIPs": [ - { - "ip": "10.132.15.193" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:09:06Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:56:27.195784979Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:56:29Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"9aa58d78-0147-4564-9900-0409a6bec341\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.61\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:56:37Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-enr8", - "uid": "9aa58d78-0147-4564-9900-0409a6bec341" - } - ], - "resourceVersion": "53106105", - "uid": "b940e7b5-9e7f-4ac7-a3ee-6c6655c1e65a" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-enr8", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b9375aed4bc463ecfa5fcfb0cfb3b55d087416bfe0c3267c1395e8f93569d03c", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:56:29Z" - } - } - } - ], - "hostIP": "10.132.0.61", - "phase": "Running", - "podIP": "10.132.0.61", - "podIPs": [ - { - "ip": "10.132.0.61" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:56:28Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:59:41.285621877Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:59:44Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"c1ab3c15-9764-40f5-ba6b-82556dc98ea2\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.62\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:59:52Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-oq2w", - "uid": "c1ab3c15-9764-40f5-ba6b-82556dc98ea2" - } - ], - "resourceVersion": "53107378", - "uid": "19e52dea-6339-4ed7-8e32-3d39b242d133" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-oq2w", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://a0b27bef16953a38c48075124547583280bccf28d1d6cf54c3b3e754e2847c86", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:59:44Z" - } - } - } - ], - "hostIP": "10.132.0.62", - "phase": "Running", - "podIP": "10.132.0.62", - "podIPs": [ - { - "ip": "10.132.0.62" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:59:42Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:12:12.095932889Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:12:15Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"7042c0e8-8dc5-4d1d-8b36-92c692c31c76\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.194\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:12:22Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-rgdp", - "uid": "7042c0e8-8dc5-4d1d-8b36-92c692c31c76" - } - ], - "resourceVersion": "53112149", - "uid": "5248c280-7bde-4fe9-a74e-56ae25abb0d2" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-rgdp", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://fd91ae480585a78c59ef401dc852d58921e76693ecbd908d98e4b63da6c298ff", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:12:14Z" - } - } - } - ], - "hostIP": "10.132.15.194", - "phase": "Running", - "podIP": "10.132.15.194", - "podIPs": [ - { - "ip": "10.132.15.194" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:12:13Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:05:45.558688986Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:05:49Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"a58f61e7-9d9e-4266-90d4-16b9969cb373\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.192\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:05:56Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-x940", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-x940", - "uid": "a58f61e7-9d9e-4266-90d4-16b9969cb373" - } - ], - "resourceVersion": "53109692", - "uid": "71a05734-f741-4b7e-82fe-765c555b3607" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-x940", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://6abab671623159f7174321118f58600f8955267a139a72508e9a73631ef7920d", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:05:48Z" - } - } - } - ], - "hostIP": "10.132.15.192", - "phase": "Running", - "podIP": "10.132.15.192", - "podIPs": [ - { - "ip": "10.132.15.192" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:05:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:15:06.466708143Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:15:10Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"65f37105-dd71-428b-bf8b-0e82b88027f1\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.195\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:15:17Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-zzyg", - "uid": "65f37105-dd71-428b-bf8b-0e82b88027f1" - } - ], - "resourceVersion": "53113200", - "uid": "dac23622-ae54-4a1a-a6ca-3c020911966e" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-zzyg", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://ee309dad5cb7047fcbd7eb0401760ccb4bd986080ab11c860911e37b132a2a5c", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:15:09Z" - } - } - } - ], - "hostIP": "10.132.15.195", - "phase": "Running", - "podIP": "10.132.15.195", - "podIPs": [ - { - "ip": "10.132.15.195" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:15:07Z" - } - } - ], - "listInputKinds": null - } - ], - "remediation": "If your application does not need it, make sure the allowPrivilegeEscalation field of the securityContext is set to false.", - "description": "Attackers may gain access to a container and uplift its privilege to enable excessive capabilities.", - "score": 100 - }, - { - "guid": "", - "attributes": { - "armoBuiltin": true, - "microsoftMitreColumns": [ - "Credential access", - "Lateral Movement" - ] - }, - "id": "C-0012", - "controlID": "C-0012", - "name": "Applications credentials in configuration files", - "ruleReports": [ - { - "name": "rule-credentials-in-env-var", - "remediation": "", - "ruleStatus": { - "status": "success", - "message": "" - }, - "ruleResponses": null, - "listInputResources": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-audit\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-audit\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CONFIG_FILES\",\"value\":\"/config/config.json\"},{\"name\":\"CA_SERVER_TYPE\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"cluster_kind\",\"name\":\"ca-audit\"}}}],\"image\":\"quay.io/armosec/k8s-ca-auditlog-ubi:21\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-audit\",\"ports\":[{\"containerPort\":443,\"name\":\"ca-audit-port\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/config\",\"name\":\"ca-audit\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-audit\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"config\",\"path\":\"config.json\"}],\"name\":\"ca-audit\"},\"name\":\"ca-audit\"},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:54Z", - "generation": 1, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CONFIG_FILES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_SERVER_TYPE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:54Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-audit", - "namespace": "cyberarmor-system", - "resourceVersion": "60787209", - "uid": "687f52ea-6956-4e8a-bb8c-7ea35a04b3f0" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-audit" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CONFIG_FILES", - "value": "/config/config.json" - }, - { - "name": "CA_SERVER_TYPE", - "valueFrom": { - "configMapKeyRef": { - "key": "cluster_kind", - "name": "ca-audit" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-auditlog-ubi:21", - "imagePullPolicy": "Always", - "name": "ca-audit", - "ports": [ - { - "containerPort": 443, - "name": "ca-audit-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/config", - "name": "ca-audit", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-audit", - "serviceAccountName": "ca-audit", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "config", - "path": "config.json" - } - ], - "name": "ca-audit" - }, - "name": "ca-audit" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:54Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-audit-c667df747\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-dashboard-aggregator\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-dashboard-aggregator\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-configtype=1\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-dashboard-aggregator\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"40Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:55Z", - "generation": 1, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-dashboard-aggregator\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:55Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T23:55:20Z" - } - ], - "name": "ca-dashboard-aggregator", - "namespace": "cyberarmor-system", - "resourceVersion": "61250607", - "uid": "0ba23569-e254-4388-b22f-30cc1eca031b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-dashboard-aggregator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-configtype=1", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173", - "imagePullPolicy": "Always", - "name": "ca-dashboard-aggregator", - "resources": { - "limits": { - "cpu": "200m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "40Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:18:55Z", - "lastUpdateTime": "2021-10-12T00:19:19Z", - "message": "ReplicaSet \"ca-dashboard-aggregator-5b8bdbc8f5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-12T23:55:20Z", - "lastUpdateTime": "2021-10-12T23:55:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-notification-server\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-notification-server\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"maserNotificationServer\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\",\"value\":\"customerGUID\"},{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\",\"value\":\"8001\"},{\"name\":\"CA_NOTIFICATION_SERVER_PORT\",\"value\":\"8002\"}],\"image\":\"quay.io/armosec/notification-server-ubi:89\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-notification-server\",\"ports\":[{\"containerPort\":8001,\"name\":\"websocket\"},{\"containerPort\":8002,\"name\":\"rest-api\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:59Z", - "generation": 1, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-notification-server\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8001,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:59Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:11Z" - } - ], - "name": "ca-notification-server", - "namespace": "cyberarmor-system", - "resourceVersion": "60787036", - "uid": "8c3dc6fe-e730-4364-8445-dc5a05ad2b0f" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-notification-server" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_HOST", - "valueFrom": { - "configMapKeyRef": { - "key": "maserNotificationServer", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_ATTRIBUTES", - "value": "customerGUID" - }, - { - "name": "CA_NOTIFICATION_SERVER_WS_PORT", - "value": "8001" - }, - { - "name": "CA_NOTIFICATION_SERVER_PORT", - "value": "8002" - } - ], - "image": "quay.io/armosec/notification-server-ubi:89", - "imagePullPolicy": "Always", - "name": "ca-notification-server", - "ports": [ - { - "containerPort": 8001, - "name": "websocket", - "protocol": "TCP" - }, - { - "containerPort": 8002, - "name": "rest-api", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "50Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:11Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:59Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "ReplicaSet \"ca-notification-server-6fd966c875\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-ocimage\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-ocimage\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-ocimage:63\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-ocimage\",\"ports\":[{\"containerPort\":8080,\"name\":\"ca-ocimage-port\"}],\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:51Z", - "generation": 1, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-ocimage\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:04Z" - } - ], - "name": "ca-ocimage", - "namespace": "cyberarmor-system", - "resourceVersion": "60786986", - "uid": "a6d37edf-b144-4677-91b3-73c73d9c7df6" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-ocimage" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-ocimage:63", - "imagePullPolicy": "Always", - "name": "ca-ocimage", - "ports": [ - { - "containerPort": 8080, - "name": "ca-ocimage-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "1", - "memory": "1000Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:04Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:51Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "ReplicaSet \"ca-ocimage-5576ff7d7d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-oracle\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-oracle\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_ORACLE_PORT\",\"value\":\"4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8002\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-oracle-ubi:11\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-oracle\",\"ports\":[{\"containerPort\":4000,\"name\":\"ca-oracle\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:19:01Z", - "generation": 1, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-oracle\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:19:01Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-oracle", - "namespace": "cyberarmor-system", - "resourceVersion": "60787203", - "uid": "da3dd21c-bf13-4d2a-97da-ca80b94d08d3" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-oracle" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_ORACLE_PORT", - "value": "4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8002" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-oracle-ubi:11", - "imagePullPolicy": "Always", - "name": "ca-oracle", - "ports": [ - { - "containerPort": 4000, - "name": "ca-oracle", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:19:01Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-oracle-6c98c6bdbf\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-posture\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-posture\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8001\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-posture-ubi:112\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-posture\",\"ports\":[{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/resources/config\",\"name\":\"ca-posture-score-config\",\"readOnly\":false},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"},{\"configMap\":{\"items\":[{\"key\":\"resourcesdict.json\",\"path\":\"resourcesdict.json\"},{\"key\":\"frameworkdict.json\",\"path\":\"frameworkdict.json\"}],\"name\":\"ca-posture-score-config\"},\"name\":\"ca-posture-score-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:58Z", - "generation": 1, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-posture\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/resources/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-posture-score-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:58Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:45Z" - } - ], - "name": "ca-posture", - "namespace": "cyberarmor-system", - "resourceVersion": "60787259", - "uid": "f41f4dc1-cfb0-4201-bca7-f1cf0b72b6b7" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-posture" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8001" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-posture-ubi:112", - "imagePullPolicy": "Always", - "name": "ca-posture", - "ports": [ - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "500m", - "memory": "100Mi" - }, - "requests": { - "cpu": "100m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/resources/config", - "name": "ca-posture-score-config" - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "resourcesdict.json", - "path": "resourcesdict.json" - }, - { - "key": "frameworkdict.json", - "path": "frameworkdict.json" - } - ], - "name": "ca-posture-score-config" - }, - "name": "ca-posture-score-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:45Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:58Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "ReplicaSet \"ca-posture-5996968d7b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-rbac\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-rbac\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"S3_BUCKET\",\"value\":\"ca-kubernetes-rbac-db-dev\"},{\"name\":\"AWS_REGION\",\"value\":\"eu-west-1\"},{\"name\":\"AWS_ACCESS_KEY_ID\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keyid\",\"name\":\"ca-rbac\"}}},{\"name\":\"AWS_SECRET_ACCESS_KEY\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keysecret\",\"name\":\"ca-rbac\"}}}],\"image\":\"quay.io/armosec/k8s-ca-rbac-scanner-ubi:20\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-rbac\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"400Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:50Z", - "generation": 1, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-rbac\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AWS_ACCESS_KEY_ID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"AWS_REGION\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"AWS_SECRET_ACCESS_KEY\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"S3_BUCKET\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:13Z" - } - ], - "name": "ca-rbac", - "namespace": "cyberarmor-system", - "resourceVersion": "60787051", - "uid": "d5898a09-2489-4254-b210-0725ddb2427a" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-rbac" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "S3_BUCKET", - "value": "ca-kubernetes-rbac-db-dev" - }, - { - "name": "AWS_REGION", - "value": "eu-west-1" - }, - { - "name": "AWS_ACCESS_KEY_ID", - "valueFrom": { - "secretKeyRef": { - "key": "keyid", - "name": "ca-rbac" - } - } - }, - { - "name": "AWS_SECRET_ACCESS_KEY", - "valueFrom": { - "secretKeyRef": { - "key": "keysecret", - "name": "ca-rbac" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-rbac-scanner-ubi:20", - "imagePullPolicy": "Always", - "name": "ca-rbac", - "resources": { - "limits": { - "cpu": "200m", - "memory": "400Mi" - }, - "requests": { - "cpu": "10m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:13Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:50Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "ReplicaSet \"ca-rbac-75c8cfd6b4\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-vuln-scan\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-vuln-scan\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"EVENT_RECEIVER_URL\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\",\"value\":\"4\"}],\"image\":\"quay.io/armosec/k8s-ca-vuln-scan-ubi:84\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-vuln-scan\",\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1.5Gi\"},\"requests\":{\"cpu\":\"500m\",\"memory\":\"1Gi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:47Z", - "generation": 1, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-vuln-scan\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EVENT_RECEIVER_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:00Z" - } - ], - "name": "ca-vuln-scan", - "namespace": "cyberarmor-system", - "resourceVersion": "60786938", - "uid": "9ea3d6cb-c6c0-423f-aab2-630827939285" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-vuln-scan" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "EVENT_RECEIVER_URL", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_MAX_VULN_SCAN_ROUTINS", - "value": "4" - } - ], - "image": "quay.io/armosec/k8s-ca-vuln-scan-ubi:84", - "imagePullPolicy": "Always", - "name": "ca-vuln-scan", - "resources": { - "limits": { - "cpu": "1", - "memory": "1536Mi" - }, - "requests": { - "cpu": "500m", - "memory": "1Gi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:00Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:47Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "ReplicaSet \"ca-vuln-scan-75b499df8c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-webhook\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-webhook\"}},\"template\":{\"metadata\":{\"annotations\":{\"certificate\":\"d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt\"},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-tlsCertFile=/etc/webhook/certs/tls.crt\",\"-tlsKeyFile=/etc/webhook/certs/tls.key\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_WEBHOOK_NAME\",\"value\":\"ca-webhook\"},{\"name\":\"CA_WEBHOOK_PORT\",\"value\":\"443\"},{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_LOGIN_SECRET_NAME\",\"value\":\"ca-login\"},{\"name\":\"CA_ORACLE_SERVER\",\"value\":\"http://ca-oracle:4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"http://ca-notification-server:8001\"},{\"name\":\"CA_OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-webhook-ubi:606\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-webhook\",\"ports\":[{\"containerPort\":443,\"name\":\"mutating-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"600Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"100Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/cazips\",\"name\":\"zip-download\"},{\"mountPath\":\"/etc/webhook/certs\",\"name\":\"ca-cluster-certificate\",\"readOnly\":true},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"emptyDir\":{},\"name\":\"zip-download\"},{\"name\":\"ca-cluster-certificate\",\"secret\":{\"secretName\":\"ca-cluster-certificate\"}},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:46Z", - "generation": 1, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:certificate": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-webhook\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_LOGIN_SECRET_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/cazips\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/webhook/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-cluster-certificate\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"zip-download\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:16Z" - } - ], - "name": "ca-webhook", - "namespace": "cyberarmor-system", - "resourceVersion": "60787072", - "uid": "c968fe90-8480-471f-bdf1-fa98447ce1d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-webhook" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "certificate": "d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt" - }, - "creationTimestamp": null, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-tlsCertFile=/etc/webhook/certs/tls.crt", - "-tlsKeyFile=/etc/webhook/certs/tls.key", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_WEBHOOK_NAME", - "value": "ca-webhook" - }, - { - "name": "CA_WEBHOOK_PORT", - "value": "443" - }, - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_LOGIN_SECRET_NAME", - "value": "ca-login" - }, - { - "name": "CA_ORACLE_SERVER", - "value": "http://ca-oracle:4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "http://ca-notification-server:8001" - }, - { - "name": "CA_OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-webhook-ubi:606", - "imagePullPolicy": "Always", - "name": "ca-webhook", - "ports": [ - { - "containerPort": 443, - "name": "mutating-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "600Mi" - }, - "requests": { - "cpu": "300m", - "memory": "100Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/cazips", - "name": "zip-download" - }, - { - "mountPath": "/etc/webhook/certs", - "name": "ca-cluster-certificate", - "readOnly": true - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "emptyDir": {}, - "name": "zip-download" - }, - { - "name": "ca-cluster-certificate", - "secret": { - "defaultMode": 420, - "secretName": "ca-cluster-certificate" - } - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:16Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:46Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "ReplicaSet \"ca-webhook-7dd8bbd798\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-websocket\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-websocket\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_VULN_SCAN_SCHEDULE\",\"value\":\"@every 11h\"},{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\",\"value\":\"@every 12h\"},{\"name\":\"CA_DEBUG_SIGNER\",\"value\":null}],\"image\":\"quay.io/armosec/k8s-ca-websocket-ubi:406\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-websocket\",\"ports\":[{\"containerPort\":4002,\"name\":\"trigger-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:43Z", - "generation": 1, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-websocket\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_DEBUG_SIGNER\"}": { - ".": {}, - "f:name": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_VULN_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:14Z" - } - ], - "name": "ca-websocket", - "namespace": "cyberarmor-system", - "resourceVersion": "60787065", - "uid": "914f30e9-d858-4945-9314-cbd3422ebaab" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-websocket" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_VULN_SCAN_SCHEDULE", - "value": "@every 11h" - }, - { - "name": "CA_POSTURE_SCAN_SCHEDULE", - "value": "@every 12h" - }, - { - "name": "CA_DEBUG_SIGNER" - } - ], - "image": "quay.io/armosec/k8s-ca-websocket-ubi:406", - "imagePullPolicy": "Always", - "name": "ca-websocket", - "ports": [ - { - "containerPort": 4002, - "name": "trigger-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "1000Mi" - }, - "requests": { - "cpu": "300m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:14Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:43Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "ReplicaSet \"ca-websocket-857758846f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"adservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"adservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"adservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/adservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"name\":\"server\",\"ports\":[{\"containerPort\":9555}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"180Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:51Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":9555,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:12Z" - } - ], - "name": "adservice", - "namespace": "hipster", - "resourceVersion": "61263240", - "uid": "368bea36-82be-4c28-8607-cf931a836185" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "adservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6415784d-d96b-4866-9c10-d571c8d8fd35", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:29", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-adservice" - }, - "creationTimestamp": null, - "labels": { - "app": "adservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/adservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 9555, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "300Mi" - }, - "requests": { - "cpu": "200m", - "memory": "180Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:24Z", - "lastUpdateTime": "2021-10-12T00:12:24Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:51Z", - "lastUpdateTime": "2021-10-13T00:28:12Z", - "message": "ReplicaSet \"adservice-7864446d5c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"cartservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"cartservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"cartservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"REDIS_ADDR\",\"value\":\"redis-cart:6379\"}],\"image\":\"gcr.io/google-samples/microservices-demo/cartservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15,\"periodSeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":7070}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:47Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"REDIS_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7070,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T09:40:08Z" - } - ], - "name": "cartservice", - "namespace": "hipster", - "resourceVersion": "61443544", - "uid": "df767287-ffc1-4559-b7fd-32b09bf6208c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "cartservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "7ced7c5c-c483-40b3-b6bc-8829339dc3e1", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:04", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-cartservice" - }, - "creationTimestamp": null, - "labels": { - "app": "cartservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "REDIS_ADDR", - "value": "redis-cart:6379" - } - ], - "image": "gcr.io/google-samples/microservices-demo/cartservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7070, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "128Mi" - }, - "requests": { - "cpu": "200m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-13T00:27:35Z", - "message": "ReplicaSet \"cartservice-7c8f8f9ddd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T09:40:08Z", - "lastUpdateTime": "2021-10-13T09:40:08Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"checkoutservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"checkoutservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"checkoutservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"5050\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"PAYMENT_SERVICE_ADDR\",\"value\":\"paymentservice:50051\"},{\"name\":\"EMAIL_SERVICE_ADDR\",\"value\":\"emailservice:5000\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"}],\"image\":\"gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":5050}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:42Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EMAIL_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PAYMENT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":5050,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:42Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:41Z" - } - ], - "name": "checkoutservice", - "namespace": "hipster", - "resourceVersion": "61262985", - "uid": "b5e6a8d8-1ec6-4acc-bf14-e3bb28bff284" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "checkoutservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "bebad8bb-8728-4813-ae19-d22a38a289a5", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:28", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-checkoutservice" - }, - "creationTimestamp": null, - "labels": { - "app": "checkoutservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "5050" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "PAYMENT_SERVICE_ADDR", - "value": "paymentservice:50051" - }, - { - "name": "EMAIL_SERVICE_ADDR", - "value": "emailservice:5000" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - } - ], - "image": "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 5050, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T14:05:32Z", - "lastUpdateTime": "2021-10-12T14:05:32Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:42Z", - "lastUpdateTime": "2021-10-13T00:27:42Z", - "message": "ReplicaSet \"checkoutservice-86c564466c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"currencyservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"currencyservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"currencyservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"7000\"}],\"image\":\"gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":7000,\"name\":\"grpc\"}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T08:37:54Z" - } - ], - "name": "currencyservice", - "namespace": "hipster", - "resourceVersion": "61423238", - "uid": "167b75e1-1be2-4764-aaad-dbb1ae248d3c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "currencyservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "4aa34494-0348-4859-9e29-56df9baf52ba", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-currencyservice" - }, - "creationTimestamp": null, - "labels": { - "app": "currencyservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "7000" - } - ], - "image": "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7000, - "name": "grpc", - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:29:19Z", - "message": "ReplicaSet \"currencyservice-544b6d849c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T08:37:54Z", - "lastUpdateTime": "2021-10-13T08:37:54Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"emailservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"emailservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"emailservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"DISABLE_PROFILER\",\"value\":\"1\"}],\"image\":\"gcr.io/google-samples/microservices-demo/emailservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:41Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"DISABLE_PROFILER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:41Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:07Z" - } - ], - "name": "emailservice", - "namespace": "hipster", - "resourceVersion": "61263204", - "uid": "9959433f-c964-4e6d-a2d7-3d1b9b617948" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "emailservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "e8aa9826-2367-44e1-9aad-a6d617b0fa06", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:48", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-emailservice" - }, - "creationTimestamp": null, - "labels": { - "app": "emailservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "DISABLE_PROFILER", - "value": "1" - } - ], - "image": "gcr.io/google-samples/microservices-demo/emailservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-12T00:11:47Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:41Z", - "lastUpdateTime": "2021-10-13T00:28:08Z", - "message": "ReplicaSet \"emailservice-cc7c4cd87\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"frontend\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"frontend\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"frontend\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"},{\"name\":\"RECOMMENDATION_SERVICE_ADDR\",\"value\":\"recommendationservice:8080\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"CHECKOUT_SERVICE_ADDR\",\"value\":\"checkoutservice:5050\"},{\"name\":\"AD_SERVICE_ADDR\",\"value\":\"adservice:9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/frontend:v0.2.3\",\"livenessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-liveness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-readiness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:44Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AD_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CHECKOUT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"RECOMMENDATION_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:44Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:34Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:22Z" - } - ], - "name": "frontend", - "namespace": "hipster", - "resourceVersion": "61263336", - "uid": "86b92d9e-22ad-4f0a-be26-41343f05f0d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "frontend" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9611f05f-4a8b-48ff-9722-e6a2ec702d65", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:57", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-frontend", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "frontend", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - }, - { - "name": "RECOMMENDATION_SERVICE_ADDR", - "value": "recommendationservice:8080" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "CHECKOUT_SERVICE_ADDR", - "value": "checkoutservice:5050" - }, - { - "name": "AD_SERVICE_ADDR", - "value": "adservice:9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/frontend:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-liveness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-readiness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:04Z", - "lastUpdateTime": "2021-10-12T00:12:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:44Z", - "lastUpdateTime": "2021-10-13T00:28:23Z", - "message": "ReplicaSet \"frontend-c747f6f47\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"loadgenerator\",\"namespace\":\"hipster\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"loadgenerator\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"loadgenerator\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"FRONTEND_ADDR\",\"value\":\"frontend:80\"},{\"name\":\"USERS\",\"value\":\"10\"}],\"image\":\"gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3\",\"name\":\"main\",\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"256Mi\"}}}],\"restartPolicy\":\"Always\",\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"main\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"FRONTEND_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"USERS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:38Z" - } - ], - "name": "loadgenerator", - "namespace": "hipster", - "resourceVersion": "61263451", - "uid": "e9200650-d25d-43f2-b1bc-4615beaed50c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "loadgenerator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "baca3d0f-fdc8-42c6-a9b1-ee29b3d173e0", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:26", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-loadgenerator", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "loadgenerator", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "FRONTEND_ADDR", - "value": "frontend:80" - }, - { - "name": "USERS", - "value": "10" - } - ], - "image": "gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "name": "main", - "resources": { - "limits": { - "cpu": "500m", - "memory": "512Mi" - }, - "requests": { - "cpu": "300m", - "memory": "256Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-13T00:24:15Z", - "lastUpdateTime": "2021-10-13T00:24:15Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:28:38Z", - "message": "ReplicaSet \"loadgenerator-6dcb6ffc4f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"paymentservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"paymentservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"paymentservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:45Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:45Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:29:27Z" - } - ], - "name": "paymentservice", - "namespace": "hipster", - "resourceVersion": "61263785", - "uid": "ab21c30f-d153-4ea8-982e-e12a71745dae" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "paymentservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "60b5720d-99b5-47a0-8bc4-656b372a6d17", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:52", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-paymentservice" - }, - "creationTimestamp": null, - "labels": { - "app": "paymentservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:45Z", - "lastUpdateTime": "2021-10-13T00:29:27Z", - "message": "ReplicaSet \"paymentservice-849b876ffd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"productcatalogservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"productcatalogservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"productcatalogservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":3550}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:46Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":3550,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:57Z" - } - ], - "name": "productcatalogservice", - "namespace": "hipster", - "resourceVersion": "61263117", - "uid": "50b29b6e-0f97-43b8-9555-a53d9c0e18f9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "productcatalogservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9bb4cc06-3907-401b-919f-c2974a623068", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-productcatalogservice" - }, - "creationTimestamp": null, - "labels": { - "app": "productcatalogservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 3550, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:46Z", - "lastUpdateTime": "2021-10-13T00:27:57Z", - "message": "ReplicaSet \"productcatalogservice-586fd876d5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"recommendationservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"recommendationservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"recommendationservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"450Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"220Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:43Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:37Z" - } - ], - "name": "recommendationservice", - "namespace": "hipster", - "resourceVersion": "61263443", - "uid": "00437f28-24c4-4759-ab93-f0be948eabc9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "recommendationservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "8cace306-b3ce-4f2f-8a6f-b122873b4eee", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-recommendationservice" - }, - "creationTimestamp": null, - "labels": { - "app": "recommendationservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "450Mi" - }, - "requests": { - "cpu": "100m", - "memory": "220Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-12T00:11:50Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:43Z", - "lastUpdateTime": "2021-10-13T00:28:37Z", - "message": "ReplicaSet \"recommendationservice-54b7b7b95d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"redis-cart\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"redis-cart\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"redis-cart\"}},\"spec\":{\"containers\":[{\"image\":\"redis:alpine\",\"livenessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"name\":\"redis\",\"ports\":[{\"containerPort\":6379}],\"readinessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"resources\":{\"limits\":{\"cpu\":\"125m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"70m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/data\",\"name\":\"redis-data\"}]}],\"volumes\":[{\"emptyDir\":{},\"name\":\"redis-data\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:50Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"redis\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":6379,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/data\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"redis-data\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:38Z" - } - ], - "name": "redis-cart", - "namespace": "hipster", - "resourceVersion": "61262948", - "uid": "76b3aebb-9ec5-479e-81ae-975ccf1bc6ec" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "redis-cart" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "838a7c21-618b-4693-a13b-838a9231ca58", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-redis-cart" - }, - "creationTimestamp": null, - "labels": { - "app": "redis-cart", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "image": "redis:alpine", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "name": "redis", - "ports": [ - { - "containerPort": 6379, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "125m", - "memory": "256Mi" - }, - "requests": { - "cpu": "70m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/data", - "name": "redis-data" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "emptyDir": {}, - "name": "redis-data" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:57Z", - "lastUpdateTime": "2021-10-12T00:11:57Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-13T00:27:38Z", - "message": "ReplicaSet \"redis-cart-594778c8b9\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"shippingservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"shippingservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"shippingservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:49Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:49Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:11Z" - } - ], - "name": "shippingservice", - "namespace": "hipster", - "resourceVersion": "61262726", - "uid": "febd2fe5-0e28-448e-aabd-31904ebb82a9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "shippingservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6503b850-839c-4b73-95ab-195d27b3c10d", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:26:58", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-shippingservice" - }, - "creationTimestamp": null, - "labels": { - "app": "shippingservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:00Z", - "lastUpdateTime": "2021-10-12T00:12:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:49Z", - "lastUpdateTime": "2021-10-13T00:27:11Z", - "message": "ReplicaSet \"shippingservice-758c9b4d4b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":\"10%\",\"maxUnavailable\":0}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"kubedns\",\"prometheus.io/port\":\"10054\",\"prometheus.io/scrape\":\"true\",\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"labels\":{\"k8s-app\":\"kube-dns\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchExpressions\":[{\"key\":\"k8s-app\",\"operator\":\"In\",\"values\":[\"kube-dns\"]}]},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"--domain=cluster.local.\",\"--dns-port=10053\",\"--config-dir=/kube-dns-config\",\"--v=2\"],\"env\":[{\"name\":\"PROMETHEUS_PORT\",\"value\":\"10055\"}],\"image\":\"gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/kubedns\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"kubedns\",\"ports\":[{\"containerPort\":10053,\"name\":\"dns-local\",\"protocol\":\"UDP\"},{\"containerPort\":10053,\"name\":\"dns-tcp-local\",\"protocol\":\"TCP\"},{\"containerPort\":10055,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readiness\",\"port\":8081,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":3,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"memory\":\"210Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"70Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001},\"volumeMounts\":[{\"mountPath\":\"/kube-dns-config\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"-v=2\",\"-logtostderr\",\"-configDir=/etc/k8s/dns/dnsmasq-nanny\",\"-restartDnsmasq=true\",\"--\",\"-k\",\"--cache-size=1000\",\"--no-negcache\",\"--dns-forward-max=1500\",\"--log-facility=-\",\"--server=/cluster.local/127.0.0.1#10053\",\"--server=/in-addr.arpa/127.0.0.1#10053\",\"--server=/ip6.arpa/127.0.0.1#10053\"],\"image\":\"gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/dnsmasq\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"dnsmasq\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"150m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"capabilities\":{\"add\":[\"NET_BIND_SERVICE\",\"SETGID\"],\"drop\":[\"all\"]}},\"volumeMounts\":[{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"--v=2\",\"--logtostderr\",\"--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV\",\"--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV\"],\"image\":\"gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/metrics\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"sidecar\",\"ports\":[{\"containerPort\":10054,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001}}],\"dnsPolicy\":\"Default\",\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 4, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:scheduler.alpha.kubernetes.io/critical-pod": {}, - "f:seccomp.security.alpha.kubernetes.io/pod": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:podAntiAffinity": { - ".": {}, - "f:preferredDuringSchedulingIgnoredDuringExecution": {} - } - }, - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:capabilities": { - ".": {}, - "f:add": {}, - "f:drop": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"kubedns\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PROMETHEUS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10053,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10053,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10055,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/kube-dns-config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"sidecar\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10054,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - "f:image": {} - }, - "k:{\"name\":\"kubedns\"}": { - "f:image": {} - }, - "k:{\"name\":\"sidecar\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:06:26Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "53109905", - "uid": "cd5cca24-7cd2-4548-a5d3-d90beb79f9e8" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 2, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "10%", - "maxUnavailable": 0 - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "kubedns", - "prometheus.io/port": "10054", - "prometheus.io/scrape": "true", - "scheduler.alpha.kubernetes.io/critical-pod": "", - "seccomp.security.alpha.kubernetes.io/pod": "runtime/default" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns" - } - }, - "spec": { - "affinity": { - "podAntiAffinity": { - "preferredDuringSchedulingIgnoredDuringExecution": [ - { - "podAffinityTerm": { - "labelSelector": { - "matchExpressions": [ - { - "key": "k8s-app", - "operator": "In", - "values": [ - "kube-dns" - ] - } - ] - }, - "topologyKey": "kubernetes.io/hostname" - }, - "weight": 100 - } - ] - } - }, - "containers": [ - { - "args": [ - "--domain=cluster.local.", - "--dns-port=10053", - "--config-dir=/kube-dns-config", - "--v=2" - ], - "env": [ - { - "name": "PROMETHEUS_PORT", - "value": "10055" - } - ], - "image": "gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/kubedns", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "kubedns", - "ports": [ - { - "containerPort": 10053, - "name": "dns-local", - "protocol": "UDP" - }, - { - "containerPort": 10053, - "name": "dns-tcp-local", - "protocol": "TCP" - }, - { - "containerPort": 10055, - "name": "metrics", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/readiness", - "port": 8081, - "scheme": "HTTP" - }, - "initialDelaySeconds": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "resources": { - "limits": { - "memory": "210Mi" - }, - "requests": { - "cpu": "100m", - "memory": "70Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/kube-dns-config", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "-v=2", - "-logtostderr", - "-configDir=/etc/k8s/dns/dnsmasq-nanny", - "-restartDnsmasq=true", - "--", - "-k", - "--cache-size=1000", - "--no-negcache", - "--dns-forward-max=1500", - "--log-facility=-", - "--server=/cluster.local/127.0.0.1#10053", - "--server=/in-addr.arpa/127.0.0.1#10053", - "--server=/ip6.arpa/127.0.0.1#10053" - ], - "image": "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/dnsmasq", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "dnsmasq", - "ports": [ - { - "containerPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "150m", - "memory": "20Mi" - } - }, - "securityContext": { - "capabilities": { - "add": [ - "NET_BIND_SERVICE", - "SETGID" - ], - "drop": [ - "all" - ] - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/k8s/dns/dnsmasq-nanny", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "--v=2", - "--logtostderr", - "--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV", - "--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV" - ], - "image": "gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/metrics", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "sidecar", - "ports": [ - { - "containerPort": 10054, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns", - "serviceAccountName": "kube-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 2, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-09-11T01:57:38Z", - "message": "ReplicaSet \"kube-dns-59844ff879\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:06:26Z", - "lastUpdateTime": "2021-09-25T17:06:26Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 4, - "readyReplicas": 2, - "replicas": 2, - "updatedReplicas": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns-autoscaler\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns-autoscaler\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"spec\":{\"containers\":[{\"command\":[\"/cluster-proportional-autoscaler\",\"--namespace=kube-system\",\"--configmap=kube-dns-autoscaler\",\"--target=Deployment/kube-dns\",\"--default-params={\\\"linear\\\":{\\\"coresPerReplica\\\":256,\\\"nodesPerReplica\\\":16,\\\"preventSinglePointFailure\\\":true,\\\"includeUnschedulableNodes\\\":true}}\",\"--logtostderr=true\",\"--v=2\"],\"image\":\"gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0\",\"name\":\"autoscaler\",\"resources\":{\"requests\":{\"cpu\":\"20m\",\"memory\":\"10Mi\"}}}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"seccompProfile\":{\"type\":\"RuntimeDefault\"},\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns-autoscaler\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns-autoscaler", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"autoscaler\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:02:52Z" - } - ], - "name": "kube-dns-autoscaler", - "namespace": "kube-system", - "resourceVersion": "53108562", - "uid": "c84ce079-f3c8-46ba-871f-0f2d42ffee1e" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/cluster-proportional-autoscaler", - "--namespace=kube-system", - "--configmap=kube-dns-autoscaler", - "--target=Deployment/kube-dns", - "--default-params={\"linear\":{\"coresPerReplica\":256,\"nodesPerReplica\":16,\"preventSinglePointFailure\":true,\"includeUnschedulableNodes\":true}}", - "--logtostderr=true", - "--v=2" - ], - "image": "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "autoscaler", - "resources": { - "requests": { - "cpu": "20m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "seccompProfile": { - "type": "RuntimeDefault" - }, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns-autoscaler", - "serviceAccountName": "kube-dns-autoscaler", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:54:39Z", - "message": "ReplicaSet \"kube-dns-autoscaler-844c9d9448\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:02:52Z", - "lastUpdateTime": "2021-09-25T17:02:52Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"glbc\",\"kubernetes.io/cluster-service\":\"true\",\"kubernetes.io/name\":\"GLBC\"},\"name\":\"l7-default-backend\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"glbc\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"glbc\",\"name\":\"glbc\"}},\"spec\":{\"containers\":[{\"image\":\"k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":30,\"timeoutSeconds\":5},\"name\":\"default-http-backend\",\"ports\":[{\"containerPort\":8080}],\"resources\":{\"limits\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}}}],\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"tolerations\":[{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "glbc", - "kubernetes.io/cluster-service": "true", - "kubernetes.io/name": "GLBC" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:kubernetes.io/name": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:name": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"default-http-backend\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:seccompProfile": { - "f:type": {} - } - }, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:01:20Z" - } - ], - "name": "l7-default-backend", - "namespace": "kube-system", - "resourceVersion": "53107969", - "uid": "32a76c03-37a1-44e9-b293-dd6b46ed274b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "glbc" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "glbc", - "name": "glbc" - } - }, - "spec": { - "containers": [ - { - "image": "k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 30, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "default-http-backend", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "10m", - "memory": "20Mi" - }, - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:56:25Z", - "message": "ReplicaSet \"l7-default-backend-56cb9644f6\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:01:20Z", - "lastUpdateTime": "2021-09-25T17:01:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "24", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metrics-server\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server-v0.3.6\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server\"},\"spec\":{\"containers\":[{\"command\":[\"/metrics-server\",\"--metric-resolution=30s\",\"--kubelet-port=10255\",\"--deprecated-kubelet-completely-insecure=true\",\"--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP\"],\"image\":\"k8s.gcr.io/metrics-server-amd64:v0.3.6\",\"name\":\"metrics-server\",\"ports\":[{\"containerPort\":443,\"name\":\"https\",\"protocol\":\"TCP\"}]},{\"command\":[\"/pod_nanny\",\"--config-dir=/etc/config\",\"--cpu=40m\",\"--extra-cpu=0.5m\",\"--memory=35Mi\",\"--extra-memory=4Mi\",\"--threshold=5\",\"--deployment=metrics-server-v0.3.6\",\"--container=metrics-server\",\"--poll-period=300000\",\"--estimator=exponential\",\"--scale-down-delay=24h\",\"--minClusterSize=5\",\"--use-metrics=true\"],\"env\":[{\"name\":\"MY_POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"MY_POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"gke.gcr.io/addon-resizer:1.8.11-gke.0\",\"name\":\"metrics-server-nanny\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"5m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"metrics-server-config-volume\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"metrics-server\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"metrics-server-config\"},\"name\":\"metrics-server-config-volume\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 24, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metrics-server", - "kubernetes.io/cluster-service": "true", - "version": "v0.3.6" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:version": {} - }, - "f:name": {} - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - }, - "k:{\"name\":\"metrics-server-nanny\"}": { - ".": {}, - "f:command": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"MY_POD_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"MY_POD_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"metrics-server-config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - "f:resources": { - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - } - } - } - } - } - } - }, - "manager": "pod_nanny", - "operation": "Update", - "time": "2021-06-13T13:42:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-26T17:13:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-26T17:13:52Z" - } - ], - "name": "metrics-server-v0.3.6", - "namespace": "kube-system", - "resourceVersion": "53582788", - "uid": "872d0f34-7998-45d3-9eea-570e0a47e03c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - }, - "name": "metrics-server" - }, - "spec": { - "containers": [ - { - "command": [ - "/metrics-server", - "--metric-resolution=30s", - "--kubelet-port=10255", - "--deprecated-kubelet-completely-insecure=true", - "--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP" - ], - "image": "k8s.gcr.io/metrics-server-amd64:v0.3.6", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server", - "ports": [ - { - "containerPort": 443, - "name": "https", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "44m", - "memory": "63Mi" - }, - "requests": { - "cpu": "44m", - "memory": "63Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - }, - { - "command": [ - "/pod_nanny", - "--config-dir=/etc/config", - "--cpu=40m", - "--extra-cpu=0.5m", - "--memory=35Mi", - "--extra-memory=4Mi", - "--threshold=5", - "--deployment=metrics-server-v0.3.6", - "--container=metrics-server", - "--poll-period=300000", - "--estimator=exponential", - "--scale-down-delay=24h", - "--minClusterSize=5", - "--use-metrics=true" - ], - "env": [ - { - "name": "MY_POD_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.name" - } - } - }, - { - "name": "MY_POD_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - } - ], - "image": "gke.gcr.io/addon-resizer:1.8.11-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server-nanny", - "resources": { - "limits": { - "cpu": "100m", - "memory": "300Mi" - }, - "requests": { - "cpu": "5m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "metrics-server-config-volume" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "serviceAccount": "metrics-server", - "serviceAccountName": "metrics-server", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "metrics-server-config" - }, - "name": "metrics-server-config-volume" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-09-25T17:12:33Z", - "lastUpdateTime": "2021-09-25T17:12:33Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-06-13T13:42:20Z", - "lastUpdateTime": "2021-09-26T17:13:52Z", - "message": "ReplicaSet \"metrics-server-v0.3.6-7889654bbb\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 24, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "6", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-proxy\"},\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-proxy\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-proxy\"}},\"spec\":{\"containers\":[{\"command\":[\"/bin/sh\",\"-c\",\"kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\\u003e\\u003e/var/log/kube-proxy.log 2\\u003e\\u00261\"],\"env\":[{\"name\":\"KUBERNETES_SERVICE_HOST\",\"value\":\"34.78.97.243\"}],\"image\":\"gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001\",\"name\":\"kube-proxy\",\"resources\":{\"requests\":{\"cpu\":\"100m\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/log\",\"name\":\"varlog\",\"readOnly\":false},{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/lib/modules\",\"name\":\"lib-modules\",\"readOnly\":true}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\",\"node.kubernetes.io/kube-proxy-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"kube-proxy\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/log\"},\"name\":\"varlog\"},{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"hostPath\":{\"path\":\"/lib/modules\"},\"name\":\"lib-modules\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "generation": 6, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-proxy" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBERNETES_SERVICE_HOST\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/kube-proxy-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - "f:command": {}, - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:44Z" - } - ], - "name": "kube-proxy", - "namespace": "kube-system", - "resourceVersion": "52161714", - "uid": "bb6f9ab0-e586-407b-95c0-773637c696e8" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-proxy" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-proxy" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "env": [ - { - "name": "KUBERNETES_SERVICE_HOST", - "value": "34.78.97.243" - } - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux", - "node.kubernetes.io/kube-proxy-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "kube-proxy", - "serviceAccountName": "kube-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 6 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"},\"name\":\"metadata-proxy-v0.1\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metadata-proxy\",\"version\":\"v0.1\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"}},\"spec\":{\"containers\":[{\"args\":[\"--addr=0.0.0.0:988\"],\"image\":\"k8s.gcr.io/metadata-proxy:v0.1.12\",\"name\":\"metadata-proxy\",\"resources\":{\"limits\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"},\"requests\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"}},\"securityContext\":{\"privileged\":true}}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"cloud.google.com/metadata-proxy-ready\":\"true\",\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"metadata-proxy\",\"terminationGracePeriodSeconds\":30,\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 3, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:cloud.google.com/metadata-proxy-ready": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - "f:args": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - } - ], - "name": "metadata-proxy-v0.1", - "namespace": "kube-system", - "resourceVersion": "25934435", - "uid": "94bf5845-f77b-47d4-bcec-e78549b4d8a3" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metadata-proxy", - "version": "v0.1" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--addr=0.0.0.0:988" - ], - "image": "k8s.gcr.io/metadata-proxy:v0.1.12", - "imagePullPolicy": "IfNotPresent", - "name": "metadata-proxy", - "resources": { - "limits": { - "cpu": "30m", - "memory": "25Mi" - }, - "requests": { - "cpu": "30m", - "memory": "25Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "cloud.google.com/metadata-proxy-ready": "true", - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "metadata-proxy", - "serviceAccountName": "metadata-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 3 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"node-local-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"node-local-dns\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"nodelocaldns\",\"components.gke.io/component-version\":\"1.4.0\",\"prometheus.io/port\":\"9253\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"k8s-app\":\"node-local-dns\"}},\"spec\":{\"containers\":[{\"args\":[\"-localip\",\"169.254.20.10,10.72.0.10\",\"-conf\",\"/etc/Corefile\",\"-upstreamsvc\",\"kube-dns-upstream\",\"-kubednscm\",\"/etc/kube-dns\"],\"image\":\"gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1\",\"livenessProbe\":{\"httpGet\":{\"host\":\"169.254.20.10\",\"path\":\"/health\",\"port\":8080},\"initialDelaySeconds\":60,\"timeoutSeconds\":5},\"name\":\"node-cache\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"},{\"containerPort\":9253,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"25m\",\"memory\":\"5Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/etc/coredns\",\"name\":\"config-volume\"},{\"mountPath\":\"/etc/kube-dns\",\"name\":\"kube-dns-config\"}]}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"addon.gke.io/node-local-dns-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"node-local-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"},{\"configMap\":{\"items\":[{\"key\":\"Corefile\",\"path\":\"Corefile.base\"}],\"name\":\"node-local-dns\"},\"name\":\"config-volume\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"}}}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "node-local-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:host": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":9253,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/coredns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/kube-dns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:addon.gke.io/node-local-dns-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "53114241", - "uid": "5069e9ba-0784-41bf-9577-3757bcb3b6d6" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "node-local-dns" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "nodelocaldns", - "components.gke.io/component-version": "1.4.0", - "prometheus.io/port": "9253", - "prometheus.io/scrape": "true" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "node-local-dns" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-localip", - "169.254.20.10,10.72.0.10", - "-conf", - "/etc/Corefile", - "-upstreamsvc", - "kube-dns-upstream", - "-kubednscm", - "/etc/kube-dns" - ], - "image": "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "host": "169.254.20.10", - "path": "/health", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "node-cache", - "ports": [ - { - "containerPort": 53, - "hostPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "hostPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - }, - { - "containerPort": 9253, - "hostPort": 9253, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "25m", - "memory": "5Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/etc/coredns", - "name": "config-volume" - }, - { - "mountPath": "/etc/kube-dns", - "name": "kube-dns-config" - } - ] - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "addon.gke.io/node-local-dns-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "node-local-dns", - "serviceAccountName": "node-local-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "Corefile", - "path": "Corefile.base" - } - ], - "name": "node-local-dns" - }, - "name": "config-volume" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 2, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"nvidia-gpu-device-plugin\"},\"name\":\"nvidia-gpu-device-plugin\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"cloud.google.com/gke-accelerator\",\"operator\":\"Exists\"}]}]}}},\"containers\":[{\"command\":[\"/usr/bin/nvidia-gpu-device-plugin\",\"-logtostderr\",\"--enable-container-gpu-metrics\",\"--enable-health-monitoring\"],\"env\":[{\"name\":\"LD_LIBRARY_PATH\",\"value\":\"/usr/local/nvidia/lib64\"}],\"image\":\"gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317\",\"name\":\"nvidia-gpu-device-plugin\",\"ports\":[{\"containerPort\":2112,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/device-plugin\",\"name\":\"device-plugin\"},{\"mountPath\":\"/dev\",\"name\":\"dev\"},{\"mountPath\":\"/usr/local/nvidia\",\"name\":\"nvidia\"},{\"mountPath\":\"/var/lib/kubelet/pod-resources\",\"name\":\"pod-resources\"},{\"mountPath\":\"/proc\",\"name\":\"proc\"},{\"mountPath\":\"/etc/nvidia\",\"name\":\"nvidia-config\"}]}],\"priorityClassName\":\"system-node-critical\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/device-plugins\"},\"name\":\"device-plugin\"},{\"hostPath\":{\"path\":\"/dev\"},\"name\":\"dev\"},{\"hostPath\":{\"path\":\"/home/kubernetes/bin/nvidia\",\"type\":\"Directory\"},\"name\":\"nvidia\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/pod-resources\"},\"name\":\"pod-resources\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"proc\"},{\"hostPath\":{\"path\":\"/etc/nvidia\"},\"name\":\"nvidia-config\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:17Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "nvidia-gpu-device-plugin" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:nodeAffinity": { - ".": {}, - "f:requiredDuringSchedulingIgnoredDuringExecution": { - ".": {}, - "f:nodeSelectorTerms": {} - } - } - }, - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"LD_LIBRARY_PATH\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":2112,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/device-plugin\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/local/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet/pod-resources\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"dev\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"device-plugin\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"nvidia\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"pod-resources\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - "f:command": {}, - "f:image": {}, - "f:volumeMounts": { - "k:{\"mountPath\":\"/etc/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/proc\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:volumes": { - "k:{\"name\":\"nvidia-config\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"proc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "nvidia-gpu-device-plugin", - "namespace": "kube-system", - "resourceVersion": "25934477", - "uid": "14396a20-ecee-4671-aefe-2a5b9d2e0dde" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "spec": { - "affinity": { - "nodeAffinity": { - "requiredDuringSchedulingIgnoredDuringExecution": { - "nodeSelectorTerms": [ - { - "matchExpressions": [ - { - "key": "cloud.google.com/gke-accelerator", - "operator": "Exists" - } - ] - } - ] - } - } - }, - "containers": [ - { - "command": [ - "/usr/bin/nvidia-gpu-device-plugin", - "-logtostderr", - "--enable-container-gpu-metrics", - "--enable-health-monitoring" - ], - "env": [ - { - "name": "LD_LIBRARY_PATH", - "value": "/usr/local/nvidia/lib64" - } - ], - "image": "gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317", - "imagePullPolicy": "IfNotPresent", - "name": "nvidia-gpu-device-plugin", - "ports": [ - { - "containerPort": 2112, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "20Mi" - }, - "requests": { - "cpu": "50m", - "memory": "20Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/device-plugin", - "name": "device-plugin" - }, - { - "mountPath": "/dev", - "name": "dev" - }, - { - "mountPath": "/usr/local/nvidia", - "name": "nvidia" - }, - { - "mountPath": "/var/lib/kubelet/pod-resources", - "name": "pod-resources" - }, - { - "mountPath": "/proc", - "name": "proc" - }, - { - "mountPath": "/etc/nvidia", - "name": "nvidia-config" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/device-plugins", - "type": "" - }, - "name": "device-plugin" - }, - { - "hostPath": { - "path": "/dev", - "type": "" - }, - "name": "dev" - }, - { - "hostPath": { - "path": "/home/kubernetes/bin/nvidia", - "type": "Directory" - }, - "name": "nvidia" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/pod-resources", - "type": "" - }, - "name": "pod-resources" - }, - { - "hostPath": { - "path": "/proc", - "type": "" - }, - "name": "proc" - }, - { - "hostPath": { - "path": "/etc/nvidia", - "type": "" - }, - "name": "nvidia-config" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:02:45.009201226Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:02:48Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"6de798cc-d558-479a-8ef4-38363e434633\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.63\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:02:55Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-5naq", - "uid": "6de798cc-d558-479a-8ef4-38363e434633" - } - ], - "resourceVersion": "53108585", - "uid": "fdd66d80-d09d-4b43-a291-b3797c7a5864" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-5naq", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://50767376b8a42b7a390e84c5c451d1485b1a562873b915100dc605bbcc49c1c5", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:02:48Z" - } - } - } - ], - "hostIP": "10.132.0.63", - "phase": "Running", - "podIP": "10.132.0.63", - "podIPs": [ - { - "ip": "10.132.0.63" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:02:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:09:05.595580038Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:09:09Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"d288c56c-2a00-42fe-b2ea-b8761fec2a4e\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.193\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:09:16Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-abj3", - "uid": "d288c56c-2a00-42fe-b2ea-b8761fec2a4e" - } - ], - "resourceVersion": "53110982", - "uid": "0866b060-d7a6-40bc-9ed9-292fbce958e9" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-abj3", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b04121a3de085254493b48dbe1be551abd021877d1c098afbd19e6429df8f4ba", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:09:08Z" - } - } - } - ], - "hostIP": "10.132.15.193", - "phase": "Running", - "podIP": "10.132.15.193", - "podIPs": [ - { - "ip": "10.132.15.193" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:09:06Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:56:27.195784979Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:56:29Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"9aa58d78-0147-4564-9900-0409a6bec341\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.61\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:56:37Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-enr8", - "uid": "9aa58d78-0147-4564-9900-0409a6bec341" - } - ], - "resourceVersion": "53106105", - "uid": "b940e7b5-9e7f-4ac7-a3ee-6c6655c1e65a" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-enr8", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b9375aed4bc463ecfa5fcfb0cfb3b55d087416bfe0c3267c1395e8f93569d03c", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:56:29Z" - } - } - } - ], - "hostIP": "10.132.0.61", - "phase": "Running", - "podIP": "10.132.0.61", - "podIPs": [ - { - "ip": "10.132.0.61" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:56:28Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:59:41.285621877Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:59:44Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"c1ab3c15-9764-40f5-ba6b-82556dc98ea2\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.62\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:59:52Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-oq2w", - "uid": "c1ab3c15-9764-40f5-ba6b-82556dc98ea2" - } - ], - "resourceVersion": "53107378", - "uid": "19e52dea-6339-4ed7-8e32-3d39b242d133" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-oq2w", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://a0b27bef16953a38c48075124547583280bccf28d1d6cf54c3b3e754e2847c86", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:59:44Z" - } - } - } - ], - "hostIP": "10.132.0.62", - "phase": "Running", - "podIP": "10.132.0.62", - "podIPs": [ - { - "ip": "10.132.0.62" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:59:42Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:12:12.095932889Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:12:15Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"7042c0e8-8dc5-4d1d-8b36-92c692c31c76\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.194\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:12:22Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-rgdp", - "uid": "7042c0e8-8dc5-4d1d-8b36-92c692c31c76" - } - ], - "resourceVersion": "53112149", - "uid": "5248c280-7bde-4fe9-a74e-56ae25abb0d2" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-rgdp", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://fd91ae480585a78c59ef401dc852d58921e76693ecbd908d98e4b63da6c298ff", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:12:14Z" - } - } - } - ], - "hostIP": "10.132.15.194", - "phase": "Running", - "podIP": "10.132.15.194", - "podIPs": [ - { - "ip": "10.132.15.194" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:12:13Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:05:45.558688986Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:05:49Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"a58f61e7-9d9e-4266-90d4-16b9969cb373\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.192\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:05:56Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-x940", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-x940", - "uid": "a58f61e7-9d9e-4266-90d4-16b9969cb373" - } - ], - "resourceVersion": "53109692", - "uid": "71a05734-f741-4b7e-82fe-765c555b3607" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-x940", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://6abab671623159f7174321118f58600f8955267a139a72508e9a73631ef7920d", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:05:48Z" - } - } - } - ], - "hostIP": "10.132.15.192", - "phase": "Running", - "podIP": "10.132.15.192", - "podIPs": [ - { - "ip": "10.132.15.192" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:05:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:15:06.466708143Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:15:10Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"65f37105-dd71-428b-bf8b-0e82b88027f1\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.195\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:15:17Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-zzyg", - "uid": "65f37105-dd71-428b-bf8b-0e82b88027f1" - } - ], - "resourceVersion": "53113200", - "uid": "dac23622-ae54-4a1a-a6ca-3c020911966e" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-zzyg", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://ee309dad5cb7047fcbd7eb0401760ccb4bd986080ab11c860911e37b132a2a5c", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:15:09Z" - } - } - } - ], - "hostIP": "10.132.15.195", - "phase": "Running", - "podIP": "10.132.15.195", - "podIPs": [ - { - "ip": "10.132.15.195" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:15:07Z" - } - } - ], - "listInputKinds": null - }, - { - "name": "rule-credentials-configmap", - "remediation": "", - "ruleStatus": { - "status": "success", - "message": "" - }, - "ruleResponses": [ - { - "alertMessage": "this configmap has sensitive information: extension-apiserver-authentication", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "data": { - "client-ca-file": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", - "requestheader-allowed-names": "[\"aggregator\"]", - "requestheader-client-ca-file": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", - "requestheader-extra-headers-prefix": "[\"X-Remote-Extra-\"]", - "requestheader-group-headers": "[\"X-Remote-Group\"]", - "requestheader-username-headers": "[\"X-Remote-User\"]" - }, - "kind": "ConfigMap", - "metadata": { - "creationTimestamp": "2021-06-13T13:41:59Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:data": { - ".": {}, - "f:client-ca-file": {}, - "f:requestheader-allowed-names": {}, - "f:requestheader-client-ca-file": {}, - "f:requestheader-extra-headers-prefix": {}, - "f:requestheader-group-headers": {}, - "f:requestheader-username-headers": {} - } - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:41:59Z" - } - ], - "name": "extension-apiserver-authentication", - "namespace": "kube-system", - "resourceVersion": "13", - "uid": "47bd73ec-6cc2-4e8e-92df-24765cc5b09b" - } - } - ] - } - }, - { - "alertMessage": "this configmap has sensitive information: kube-root-ca.crt", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "data": { - "ca.crt": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" - }, - "kind": "ConfigMap", - "metadata": { - "creationTimestamp": "2021-10-12T00:18:35Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:data": { - ".": {}, - "f:ca.crt": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:18:35Z" - } - ], - "name": "kube-root-ca.crt", - "namespace": "cyberarmor-system", - "resourceVersion": "60786632", - "uid": "bfede1f5-5497-4b49-9772-11bb6c5b9d3f" - } - } - ] - } - }, - { - "alertMessage": "this configmap has sensitive information: kube-root-ca.crt", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "data": { - "ca.crt": "-----BEGIN CERTIFICATE-----\nMIIDKzCCAhOgAwIBAgIRAMBGTjKUoXZJUSsyFzT8p0kwDQYJKoZIhvcNAQELBQAw\nLzEtMCsGA1UEAxMkYWNhYWI4YzYtYjJlMS00MWU3LTgxODUtOTBjMTY5OWIyNjY5\nMB4XDTIxMDYxMzEyNDAwNFoXDTI2MDYxMjEzNDAwNFowLzEtMCsGA1UEAxMkYWNh\nYWI4YzYtYjJlMS00MWU3LTgxODUtOTBjMTY5OWIyNjY5MIIBIjANBgkqhkiG9w0B\nAQEFAAOCAQ8AMIIBCgKCAQEArMr22bWL/JTBDmg0Ax+neJJtJkbIODd0qGdMUH/P\nxm5uPWhKlpsOvglvDrzBkdNnlIkBth0lIQ8blenQjMUlMlbpIV3snRaFe3IiZZgN\niEidHGUkTuWNJQUoCyoL81388gtMc6yl83fBbu9hw3oc1FVfu+fCKnQ/cAu49Kkl\nSnEzAJ6gWjLjz+Qw6VEmKTZF8xgm7uxFAs3PMN5Gso8Uv3d2ONx37iR5YBXNcS6Q\nlcsGkeqjHLfYrqik/DuQxC7hIiN/Q+SQmMD8z7/so6c06PNjTc9F03xUEj0qFJ6H\nO1+QkcFwngl7XGVOUp0cKKxXMKktjLurFtJ74h3qDBzc7QIDAQABo0IwQDAOBgNV\nHQ8BAf8EBAMCAgQwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUGmiF5d7FBvx6\nDXzO1lh/nn6wGMwwDQYJKoZIhvcNAQELBQADggEBAErfrUxGv3Mi8d1r9gggo43I\nMhYZtojgYn+HWQq9HzvkYrPy+/Z5Xr7juyHdF7n16Pt/DQJ+tPwOvcgYqz/5z/vz\nxCWlJqVPK/oTuxK5aBWDkt6tOiHMGawRArW6sYCtIk9sbiJaZPC4p0YZijdNljKQ\n5oxkzlHVAYIr/tBO8mSJUtFpwDlZrJXt2RY7444SP1GPLAjojMM21q/7+ewcsMI1\nriGI+RDNMBI0n8vlDppNo7HbZg/seYvgwFIZaRLY3y4rJr4zsAzeTUtd9XQ6vSro\nyqtRDVGGzrzxP+I01PhkEzmda/+MbcBzE+tNLkhGqw6PsLuNK+63BHAC4Cv5fCY=\n-----END CERTIFICATE-----\n" - }, - "kind": "ConfigMap", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:data": { - ".": {}, - "f:ca.crt": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:15Z" - } - ], - "name": "kube-root-ca.crt", - "namespace": "default", - "resourceVersion": "292", - "uid": "af24bd4c-c061-47b9-8ef0-7122313d4f3d" - } - } - ] - } - }, - { - "alertMessage": "this configmap has sensitive information: kube-root-ca.crt", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "data": { - "ca.crt": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" - }, - "kind": "ConfigMap", - "metadata": { - "creationTimestamp": "2021-07-27T19:59:29Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:data": { - ".": {}, - "f:ca.crt": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-07-27T19:59:29Z" - } - ], - "name": "kube-root-ca.crt", - "namespace": "hipster", - "resourceVersion": "24370765", - "uid": "bb9ff0e3-1134-4d1e-b7d4-33f00d8361bf" - } - } - ] - } - }, - { - "alertMessage": "this configmap has sensitive information: kube-root-ca.crt", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "data": { - "ca.crt": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" - }, - "kind": "ConfigMap", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:data": { - ".": {}, - "f:ca.crt": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:15Z" - } - ], - "name": "kube-root-ca.crt", - "namespace": "kube-node-lease", - "resourceVersion": "289", - "uid": "1471c253-e4de-4291-a653-40107e58165c" - } - } - ] - } - }, - { - "alertMessage": "this configmap has sensitive information: kube-root-ca.crt", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "data": { - "ca.crt": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" - }, - "kind": "ConfigMap", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:data": { - ".": {}, - "f:ca.crt": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:15Z" - } - ], - "name": "kube-root-ca.crt", - "namespace": "kube-public", - "resourceVersion": "288", - "uid": "4ff7bd82-4f35-485c-91c8-b00fc9f4a7bc" - } - } - ] - } - }, - { - "alertMessage": "this configmap has sensitive information: kube-root-ca.crt", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "data": { - "ca.crt": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" - }, - "kind": "ConfigMap", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:data": { - ".": {}, - "f:ca.crt": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:15Z" - } - ], - "name": "kube-root-ca.crt", - "namespace": "kube-system", - "resourceVersion": "284", - "uid": "da8e45b0-a8a8-4084-9824-55db603eb5ac" - } - } - ] - } - } - ], - "listInputResources": [ - { - "apiVersion": "v1", - "data": { - "clusterData": "{\n \"ociImageURL\": \"ca-ocimage:8080\",\n \"notificationWSURL\": \"ca-notification-server:8001\",\n \"notificationRestURL\": \"ca-notification-server:8002\",\n \"vulnScanURL\": \"ca-vuln-scan:8080\",\n \"oracleURL\": \"ca-oracle:4000\",\n \"clairURL\": \"clair-clair:8080\",\n \"eventReceiverREST\": \"https://report.eustage2.cyberarmorsoft.com\",\n \"eventReceiverWS\": \"wss://report.eustage2.cyberarmorsoft.com\",\n \"maserNotificationServer\": \"wss://mns.eustage2.cyberarmorsoft.com/v1/waitfornotification\",\n \"postman\": \"wss://postman.eustage2.cyberarmorsoft.com\",\n \"dashboard\": \"https://dashbe.eustage2.cyberarmorsoft.com\",\n \"portal\": \"https://caportalbe.eustage2.cyberarmorsoft.com\",\n \"customerGUID\": \"1e3a88bf-92ce-44f8-914e-cbe71830d566\",\n \"clusterGUID\": \"10a08fac-3c71-412f-bb42-7348a86ea83e\",\n \"clusterName\": \"lss1\"\n}\n", - "clusterGUID": "10a08fac-3c71-412f-bb42-7348a86ea83e", - "clusterName": "lss1", - "customerGUID": "1e3a88bf-92ce-44f8-914e-cbe71830d566", - "dashboard": "https://dashbe.eustage2.cyberarmorsoft.com", - "eventReceiverREST": "https://report.eustage2.cyberarmorsoft.com", - "eventReceiverWS": "wss://report.eustage2.cyberarmorsoft.com", - "maserNotificationServer": "wss://mns.eustage2.cyberarmorsoft.com/v1/waitfornotification", - "portal": "https://caportalbe.eustage2.cyberarmorsoft.com", - "postman": "wss://postman.eustage2.cyberarmorsoft.com" - }, - "kind": "ConfigMap", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"data\":{\"clusterData\":\"{\\n \\\"ociImageURL\\\": \\\"ca-ocimage:8080\\\",\\n \\\"notificationWSURL\\\": \\\"ca-notification-server:8001\\\",\\n \\\"notificationRestURL\\\": \\\"ca-notification-server:8002\\\",\\n \\\"vulnScanURL\\\": \\\"ca-vuln-scan:8080\\\",\\n \\\"oracleURL\\\": \\\"ca-oracle:4000\\\",\\n \\\"clairURL\\\": \\\"clair-clair:8080\\\",\\n \\\"eventReceiverREST\\\": \\\"https://report.eustage2.cyberarmorsoft.com\\\",\\n \\\"eventReceiverWS\\\": \\\"wss://report.eustage2.cyberarmorsoft.com\\\",\\n \\\"maserNotificationServer\\\": \\\"wss://mns.eustage2.cyberarmorsoft.com/v1/waitfornotification\\\",\\n \\\"postman\\\": \\\"wss://postman.eustage2.cyberarmorsoft.com\\\",\\n \\\"dashboard\\\": \\\"https://dashbe.eustage2.cyberarmorsoft.com\\\",\\n \\\"portal\\\": \\\"https://caportalbe.eustage2.cyberarmorsoft.com\\\",\\n \\\"customerGUID\\\": \\\"1e3a88bf-92ce-44f8-914e-cbe71830d566\\\",\\n \\\"clusterGUID\\\": \\\"10a08fac-3c71-412f-bb42-7348a86ea83e\\\",\\n \\\"clusterName\\\": \\\"lss1\\\"\\n}\\n\",\"clusterGUID\":\"10a08fac-3c71-412f-bb42-7348a86ea83e\",\"clusterName\":\"lss1\",\"customerGUID\":\"1e3a88bf-92ce-44f8-914e-cbe71830d566\",\"dashboard\":\"https://dashbe.eustage2.cyberarmorsoft.com\",\"eventReceiverREST\":\"https://report.eustage2.cyberarmorsoft.com\",\"eventReceiverWS\":\"wss://report.eustage2.cyberarmorsoft.com\",\"maserNotificationServer\":\"wss://mns.eustage2.cyberarmorsoft.com/v1/waitfornotification\",\"portal\":\"https://caportalbe.eustage2.cyberarmorsoft.com\",\"postman\":\"wss://postman.eustage2.cyberarmorsoft.com\"},\"kind\":\"ConfigMap\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"armo-be-config\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"armo-be-config\",\"namespace\":\"cyberarmor-system\"}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:35Z", - "labels": { - "app": "armo-be-config", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:data": { - ".": {}, - "f:clusterData": {}, - "f:clusterGUID": {}, - "f:clusterName": {}, - "f:customerGUID": {}, - "f:dashboard": {}, - "f:eventReceiverREST": {}, - "f:eventReceiverWS": {}, - "f:maserNotificationServer": {}, - "f:portal": {}, - "f:postman": {} - }, - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:35Z" - } - ], - "name": "armo-be-config", - "namespace": "cyberarmor-system", - "resourceVersion": "60786640", - "uid": "5fabd72e-51d6-4707-888c-a2cdc1d2c68a" - } - }, - { - "apiVersion": "v1", - "data": { - "cluster_kind": "native", - "config": "{\n \"port\": \"8888\",\n \"path\": \"/v1/audit\"\n}\n" - }, - "kind": "ConfigMap", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"data\":{\"cluster_kind\":\"native\",\"config\":\"{\\n \\\"port\\\": \\\"8888\\\",\\n \\\"path\\\": \\\"/v1/audit\\\"\\n}\\n\"},\"kind\":\"ConfigMap\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-audit\",\"namespace\":\"cyberarmor-system\"}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:52Z", - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:data": { - ".": {}, - "f:cluster_kind": {}, - "f:config": {} - }, - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:52Z" - } - ], - "name": "ca-audit", - "namespace": "cyberarmor-system", - "resourceVersion": "60786833", - "uid": "7f5722a6-8bb4-49aa-b92c-2b45d37fb73f" - } - }, - { - "apiVersion": "v1", - "binaryData": { - "server": "eyJ3bGlkIjoiIiwiYWdlbnRUeXBlIjoiTGludXggUHJlbG9hZCBBZ2VudCIsImVudHJ5cG9pbnQiOlsiL2FwcC9idWlsZC9pbnN0YWxsL2hpcHN0ZXJzaG9wL2Jpbi9BZFNlcnZpY2UiXX0=" - }, - "kind": "ConfigMap", - "metadata": { - "annotations": { - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-adservice" - }, - "creationTimestamp": "2021-10-13T00:23:24Z", - "labels": { - "app": "ca-hipster-deployment-adservice", - "origin-namespace": "hipster" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:binaryData": { - ".": {}, - "f:server": {} - }, - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.wlid": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:origin-namespace": {} - } - } - }, - "manager": "k8s-ca-webhook", - "operation": "Update", - "time": "2021-10-13T00:23:24Z" - } - ], - "name": "ca-hipster-deployment-adservice", - "namespace": "cyberarmor-system", - "resourceVersion": "61261234", - "uid": "1aef9ba7-9348-44e5-bbf2-64159018265f" - } - }, - { - "apiVersion": "v1", - "binaryData": { - "monitor": "eyJ3bGlkIjoiIiwiYWdlbnRUeXBlIjoiTGludXggUHJlbG9hZCBBZ2VudCIsImNvbW1hbmRMaW5lIjpbInB5dGhvbjMiLCJkc2VydmljZS5weSJdfQ==" - }, - "kind": "ConfigMap", - "metadata": { - "annotations": { - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-bi-monitor" - }, - "creationTimestamp": "2021-10-12T23:55:48Z", - "labels": { - "app": "ca-hipster-deployment-bi-monitor", - "origin-namespace": "hipster" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:binaryData": { - ".": {}, - "f:monitor": {} - }, - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.wlid": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:origin-namespace": {} - } - } - }, - "manager": "k8s-ca-webhook", - "operation": "Update", - "time": "2021-10-12T23:55:48Z" - } - ], - "name": "ca-hipster-deployment-bi-monitor", - "namespace": "cyberarmor-system", - "resourceVersion": "61250763", - "uid": "62098a93-ef8d-41aa-919b-0d5613a6b0c9" - } - }, - { - "apiVersion": "v1", - "binaryData": { - "server": "eyJ3bGlkIjoiIiwiYWdlbnRUeXBlIjoiTGludXggUHJlbG9hZCBBZ2VudCIsImVudHJ5cG9pbnQiOlsiL2FwcC9jYXJ0c2VydmljZSJdfQ==" - }, - "kind": "ConfigMap", - "metadata": { - "annotations": { - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-cartservice" - }, - "creationTimestamp": "2021-10-13T00:23:09Z", - "labels": { - "app": "ca-hipster-deployment-cartservice", - "origin-namespace": "hipster" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:binaryData": { - ".": {}, - "f:server": {} - }, - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.wlid": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:origin-namespace": {} - } - } - }, - "manager": "k8s-ca-webhook", - "operation": "Update", - "time": "2021-10-13T00:23:09Z" - } - ], - "name": "ca-hipster-deployment-cartservice", - "namespace": "cyberarmor-system", - "resourceVersion": "61261028", - "uid": "d3ae7752-4e49-4585-b513-7e2ed9afa25a" - } - }, - { - "apiVersion": "v1", - "binaryData": { - "server": "eyJ3bGlkIjoiIiwiYWdlbnRUeXBlIjoiTGludXggUHJlbG9hZCBBZ2VudCIsImVudHJ5cG9pbnQiOlsiL2NoZWNrb3V0c2VydmljZSJdfQ==" - }, - "kind": "ConfigMap", - "metadata": { - "annotations": { - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-checkoutservice" - }, - "creationTimestamp": "2021-10-13T00:22:52Z", - "labels": { - "app": "ca-hipster-deployment-checkoutservice", - "origin-namespace": "hipster" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:binaryData": { - ".": {}, - "f:server": {} - }, - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.wlid": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:origin-namespace": {} - } - } - }, - "manager": "k8s-ca-webhook", - "operation": "Update", - "time": "2021-10-13T00:22:52Z" - } - ], - "name": "ca-hipster-deployment-checkoutservice", - "namespace": "cyberarmor-system", - "resourceVersion": "61260883", - "uid": "60f22885-e686-4b7d-bf00-c5aee243b831" - } - }, - { - "apiVersion": "v1", - "binaryData": { - "server": "eyJ3bGlkIjoiIiwiYWdlbnRUeXBlIjoiTGludXggUHJlbG9hZCBBZ2VudCIsImVudHJ5cG9pbnQiOlsibm9kZSIsInNlcnZlci5qcyJdfQ==" - }, - "kind": "ConfigMap", - "metadata": { - "annotations": { - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-currencyservice" - }, - "creationTimestamp": "2021-10-13T00:22:53Z", - "labels": { - "app": "ca-hipster-deployment-currencyservice", - "origin-namespace": "hipster" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:binaryData": { - ".": {}, - "f:server": {} - }, - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.wlid": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:origin-namespace": {} - } - } - }, - "manager": "k8s-ca-webhook", - "operation": "Update", - "time": "2021-10-13T00:22:53Z" - } - ], - "name": "ca-hipster-deployment-currencyservice", - "namespace": "cyberarmor-system", - "resourceVersion": "61260898", - "uid": "ba1f6f12-247c-4074-8970-53a316478b77" - } - }, - { - "apiVersion": "v1", - "binaryData": { - "server": "eyJ3bGlkIjoiIiwiYWdlbnRUeXBlIjoiTGludXggUHJlbG9hZCBBZ2VudCIsImVudHJ5cG9pbnQiOlsicHl0aG9uIiwiZW1haWxfc2VydmVyLnB5Il19" - }, - "kind": "ConfigMap", - "metadata": { - "annotations": { - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-emailservice" - }, - "creationTimestamp": "2021-10-13T00:23:27Z", - "labels": { - "app": "ca-hipster-deployment-emailservice", - "origin-namespace": "hipster" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:binaryData": { - ".": {}, - "f:server": {} - }, - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.wlid": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:origin-namespace": {} - } - } - }, - "manager": "k8s-ca-webhook", - "operation": "Update", - "time": "2021-10-13T00:23:27Z" - } - ], - "name": "ca-hipster-deployment-emailservice", - "namespace": "cyberarmor-system", - "resourceVersion": "61261289", - "uid": "16fc82e5-ad08-4891-8b77-15f571445715" - } - }, - { - "apiVersion": "v1", - "binaryData": { - "server": "eyJ3bGlkIjoiIiwiYWdlbnRUeXBlIjoiTGludXggUHJlbG9hZCBBZ2VudCIsImVudHJ5cG9pbnQiOlsiL2Zyb250ZW5kL3NlcnZlciJdfQ==" - }, - "kind": "ConfigMap", - "metadata": { - "annotations": { - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-frontend" - }, - "creationTimestamp": "2021-10-13T00:23:10Z", - "labels": { - "app": "ca-hipster-deployment-frontend", - "origin-namespace": "hipster" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:binaryData": { - ".": {}, - "f:server": {} - }, - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.wlid": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:origin-namespace": {} - } - } - }, - "manager": "k8s-ca-webhook", - "operation": "Update", - "time": "2021-10-13T00:23:10Z" - } - ], - "name": "ca-hipster-deployment-frontend", - "namespace": "cyberarmor-system", - "resourceVersion": "61261044", - "uid": "fa732cfc-dac0-4ab9-a7b0-70459885806f" - } - }, - { - "apiVersion": "v1", - "binaryData": { - "main": "eyJ3bGlkIjoiIiwiYWdlbnRUeXBlIjoiTGludXggUHJlbG9hZCBBZ2VudCIsImVudHJ5cG9pbnQiOlsiL2Jpbi9zaCIsIi1jIiwiLi9sb2FkZ2VuLnNoIl19" - }, - "kind": "ConfigMap", - "metadata": { - "annotations": { - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-loadgenerator" - }, - "creationTimestamp": "2021-10-13T00:23:10Z", - "labels": { - "app": "ca-hipster-deployment-loadgenerator", - "origin-namespace": "hipster" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:binaryData": { - ".": {}, - "f:main": {} - }, - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.wlid": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:origin-namespace": {} - } - } - }, - "manager": "k8s-ca-webhook", - "operation": "Update", - "time": "2021-10-13T00:23:10Z" - } - ], - "name": "ca-hipster-deployment-loadgenerator", - "namespace": "cyberarmor-system", - "resourceVersion": "61261035", - "uid": "e74247c4-4cf0-4297-a6c4-48efa561f132" - } - }, - { - "apiVersion": "v1", - "binaryData": { - "server": "eyJ3bGlkIjoiIiwiYWdlbnRUeXBlIjoiTGludXggUHJlbG9hZCBBZ2VudCIsImVudHJ5cG9pbnQiOlsibm9kZSIsImluZGV4LmpzIl19" - }, - "kind": "ConfigMap", - "metadata": { - "annotations": { - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-paymentservice" - }, - "creationTimestamp": "2021-10-13T00:22:46Z", - "labels": { - "app": "ca-hipster-deployment-paymentservice", - "origin-namespace": "hipster" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:binaryData": { - ".": {}, - "f:server": {} - }, - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.wlid": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:origin-namespace": {} - } - } - }, - "manager": "k8s-ca-webhook", - "operation": "Update", - "time": "2021-10-13T00:22:46Z" - } - ], - "name": "ca-hipster-deployment-paymentservice", - "namespace": "cyberarmor-system", - "resourceVersion": "61260856", - "uid": "158d51ca-9fa5-42cd-8c08-20f648b6b0af" - } - }, - { - "apiVersion": "v1", - "binaryData": { - "server": "eyJ3bGlkIjoiIiwiYWdlbnRUeXBlIjoiTGludXggUHJlbG9hZCBBZ2VudCIsImVudHJ5cG9pbnQiOlsiL3Byb2R1Y3RjYXRhbG9nc2VydmljZS9zZXJ2ZXIiXX0=" - }, - "kind": "ConfigMap", - "metadata": { - "annotations": { - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-productcatalogservice" - }, - "creationTimestamp": "2021-10-13T00:22:45Z", - "labels": { - "app": "ca-hipster-deployment-productcatalogservice", - "origin-namespace": "hipster" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:binaryData": { - ".": {}, - "f:server": {} - }, - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.wlid": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:origin-namespace": {} - } - } - }, - "manager": "k8s-ca-webhook", - "operation": "Update", - "time": "2021-10-13T00:22:45Z" - } - ], - "name": "ca-hipster-deployment-productcatalogservice", - "namespace": "cyberarmor-system", - "resourceVersion": "61260843", - "uid": "742eaa44-27a3-476e-b132-53804edc52ff" - } - }, - { - "apiVersion": "v1", - "binaryData": { - "server": "eyJ3bGlkIjoiIiwiYWdlbnRUeXBlIjoiTGludXggUHJlbG9hZCBBZ2VudCIsImVudHJ5cG9pbnQiOlsicHl0aG9uIiwiL3JlY29tbWVuZGF0aW9uc2VydmljZS9yZWNvbW1lbmRhdGlvbl9zZXJ2ZXIucHkiXX0=" - }, - "kind": "ConfigMap", - "metadata": { - "annotations": { - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-recommendationservice" - }, - "creationTimestamp": "2021-10-13T00:23:04Z", - "labels": { - "app": "ca-hipster-deployment-recommendationservice", - "origin-namespace": "hipster" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:binaryData": { - ".": {}, - "f:server": {} - }, - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.wlid": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:origin-namespace": {} - } - } - }, - "manager": "k8s-ca-webhook", - "operation": "Update", - "time": "2021-10-13T00:23:04Z" - } - ], - "name": "ca-hipster-deployment-recommendationservice", - "namespace": "cyberarmor-system", - "resourceVersion": "61260998", - "uid": "2b9491f5-f909-4ce2-bc37-7c8fa2c8980a" - } - }, - { - "apiVersion": "v1", - "binaryData": { - "redis": "eyJ3bGlkIjoiIiwiYWdlbnRUeXBlIjoiTGludXggUHJlbG9hZCBBZ2VudCIsImNvbW1hbmRMaW5lIjpbInJlZGlzLXNlcnZlciJdLCJlbnRyeXBvaW50IjpbImRvY2tlci1lbnRyeXBvaW50LnNoIl19" - }, - "kind": "ConfigMap", - "metadata": { - "annotations": { - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-redis-cart" - }, - "creationTimestamp": "2021-10-13T00:22:42Z", - "labels": { - "app": "ca-hipster-deployment-redis-cart", - "origin-namespace": "hipster" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:binaryData": { - ".": {}, - "f:redis": {} - }, - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.wlid": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:origin-namespace": {} - } - } - }, - "manager": "k8s-ca-webhook", - "operation": "Update", - "time": "2021-10-13T00:22:42Z" - } - ], - "name": "ca-hipster-deployment-redis-cart", - "namespace": "cyberarmor-system", - "resourceVersion": "61260821", - "uid": "7aef832a-3ebd-46dc-9496-d705fc9eae9c" - } - }, - { - "apiVersion": "v1", - "binaryData": { - "server": "eyJ3bGlkIjoiIiwiYWdlbnRUeXBlIjoiTGludXggUHJlbG9hZCBBZ2VudCIsImVudHJ5cG9pbnQiOlsiL3NoaXBwaW5nc2VydmljZSJdfQ==" - }, - "kind": "ConfigMap", - "metadata": { - "annotations": { - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-shippingservice" - }, - "creationTimestamp": "2021-10-13T00:23:15Z", - "labels": { - "app": "ca-hipster-deployment-shippingservice", - "origin-namespace": "hipster" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:binaryData": { - ".": {}, - "f:server": {} - }, - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.wlid": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:origin-namespace": {} - } - } - }, - "manager": "k8s-ca-webhook", - "operation": "Update", - "time": "2021-10-13T00:23:15Z" - } - ], - "name": "ca-hipster-deployment-shippingservice", - "namespace": "cyberarmor-system", - "resourceVersion": "61261069", - "uid": "47f10fec-684b-4b97-b5a4-358064f3eec1" - } - }, - { - "apiVersion": "v1", - "data": { - "frameworkdict.json": "{\n \"developer_framework\": {\n \"Writable hostPath mount\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Compromised images in registry\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Exposed dashboard\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Network mapping\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Access container service account\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Access Kubelet API\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Cluster-admin binding\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Kubernetes CronJob\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"SSH server running inside container\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Pod / container name similarity\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Cluster internal networking\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Access Kubernetes dashboard\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Privileged container\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"hostPath mount\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Instance Metadata API\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Applications credentials in configuration files\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n }\n },\n \"MITRE\": {\n \"Writable hostPath mount\": {\n \"baseScore\": 8.0,\n \"improvementRatio\": 0.5\n },\n \"Sidecar injection\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Compromised images in registry\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Access tiller endpoint\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Data Destruction\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Resource Hijacking\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Access the Kubernetes API server\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Exposed dashboard\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Backdoor container\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Network mapping\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Images from private registry\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Mount service principal\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Access container service account\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Malicious admission controller (validating)\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Access Kubelet API\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Vulnerable application\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Application exploit (RCE)\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Cluster-admin binding\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Kubernetes CronJob\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"SSH server running inside container\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"List Kubernetes secrets\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Pod / container name similarity\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Cluster internal networking\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Exposed sensitive interfaces\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Bash/cmd inside container\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Clear container logs\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Access Kubernetes dashboard\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"New container\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Privileged container\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"CoreDNS poisoning\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"hostPath mount\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Instance Metadata API\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Malicious admission controller (mutating)\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Exec into container\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Delete Kubernetes events\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Applications credentials in configuration files\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n }\n },\n \"NSA\": {\n \"Control plane hardening\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Immutable container filesystem\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Non-root containers\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n },\n \"Host PID/IPC privileges\": {\n \"baseScore\": 1.0,\n \"improvementRatio\": 1.0\n }\n }\n}\n", - "resourcesdict.json": "{\n \"pod\": 1.0,\n \"service\": 1.0,\n \"daemonset\": 1.0,\n \"deployment\": 1.0,\n \"replicaset\": 1.1,\n \"statefulset\": 1.0,\n \"job\": 1.0,\n \"secret\": 1.0,\n \"cronjob\": 1.0,\n \"clusterrolebinding\": 1.0,\n \"clusterrole\": 1.0,\n \"rolebinding\": 1.0,\n \"role\": 1.0,\n \"networkpolicy\": 1.0,\n \"controllerrevision\": 1.0,\n \"namespace\": 1.0,\n \"serviceaccount\": 1.0,\n \"configmap\": 1.0,\n \"node\": 1.0\n}\n" - }, - "kind": "ConfigMap", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"data\":{\"frameworkdict.json\":\"{\\n \\\"developer_framework\\\": {\\n \\\"Writable hostPath mount\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Compromised images in registry\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Exposed dashboard\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Network mapping\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Access container service account\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Access Kubelet API\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Cluster-admin binding\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Kubernetes CronJob\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"SSH server running inside container\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Pod / container name similarity\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Cluster internal networking\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Access Kubernetes dashboard\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Privileged container\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"hostPath mount\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Instance Metadata API\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Applications credentials in configuration files\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n }\\n },\\n \\\"MITRE\\\": {\\n \\\"Writable hostPath mount\\\": {\\n \\\"baseScore\\\": 8.0,\\n \\\"improvementRatio\\\": 0.5\\n },\\n \\\"Sidecar injection\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Compromised images in registry\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Access tiller endpoint\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Data Destruction\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Resource Hijacking\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Access the Kubernetes API server\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Exposed dashboard\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Backdoor container\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Network mapping\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Images from private registry\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Mount service principal\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Access container service account\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Malicious admission controller (validating)\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Access Kubelet API\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Vulnerable application\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Application exploit (RCE)\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Cluster-admin binding\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Kubernetes CronJob\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"SSH server running inside container\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"List Kubernetes secrets\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Pod / container name similarity\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Cluster internal networking\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Exposed sensitive interfaces\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Bash/cmd inside container\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Clear container logs\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Access Kubernetes dashboard\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"New container\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Privileged container\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"CoreDNS poisoning\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"hostPath mount\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Instance Metadata API\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Malicious admission controller (mutating)\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Exec into container\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Delete Kubernetes events\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Applications credentials in configuration files\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n }\\n },\\n \\\"NSA\\\": {\\n \\\"Control plane hardening\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Immutable container filesystem\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Non-root containers\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n },\\n \\\"Host PID/IPC privileges\\\": {\\n \\\"baseScore\\\": 1.0,\\n \\\"improvementRatio\\\": 1.0\\n }\\n }\\n}\\n\",\"resourcesdict.json\":\"{\\n \\\"pod\\\": 1.0,\\n \\\"service\\\": 1.0,\\n \\\"daemonset\\\": 1.0,\\n \\\"deployment\\\": 1.0,\\n \\\"replicaset\\\": 1.1,\\n \\\"statefulset\\\": 1.0,\\n \\\"job\\\": 1.0,\\n \\\"secret\\\": 1.0,\\n \\\"cronjob\\\": 1.0,\\n \\\"clusterrolebinding\\\": 1.0,\\n \\\"clusterrole\\\": 1.0,\\n \\\"rolebinding\\\": 1.0,\\n \\\"role\\\": 1.0,\\n \\\"networkpolicy\\\": 1.0,\\n \\\"controllerrevision\\\": 1.0,\\n \\\"namespace\\\": 1.0,\\n \\\"serviceaccount\\\": 1.0,\\n \\\"configmap\\\": 1.0,\\n \\\"node\\\": 1.0\\n}\\n\"},\"kind\":\"ConfigMap\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"armo-be-config\"},\"name\":\"ca-posture-score-config\",\"namespace\":\"cyberarmor-system\"}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:56Z", - "labels": { - "app": "armo-be-config" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:data": { - ".": {}, - "f:frameworkdict.json": {}, - "f:resourcesdict.json": {} - }, - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:56Z" - } - ], - "name": "ca-posture-score-config", - "namespace": "cyberarmor-system", - "resourceVersion": "60786886", - "uid": "a215c33c-9866-4989-9805-cb0432f287f6" - } - }, - { - "apiVersion": "v1", - "data": { - "ca.crt": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" - }, - "kind": "ConfigMap", - "metadata": { - "creationTimestamp": "2021-10-12T00:18:35Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:data": { - ".": {}, - "f:ca.crt": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:18:35Z" - } - ], - "name": "kube-root-ca.crt", - "namespace": "cyberarmor-system", - "resourceVersion": "60786632", - "uid": "bfede1f5-5497-4b49-9772-11bb6c5b9d3f" - } - }, - { - "apiVersion": "v1", - "data": { - "ca.crt": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" - }, - "kind": "ConfigMap", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:data": { - ".": {}, - "f:ca.crt": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:15Z" - } - ], - "name": "kube-root-ca.crt", - "namespace": "default", - "resourceVersion": "292", - "uid": "af24bd4c-c061-47b9-8ef0-7122313d4f3d" - } - }, - { - "apiVersion": "v1", - "data": { - "adminMail": "rrefael...", - "customerGUID": "25bf3818-25f7-45df-b809-71eb0b0322bd", - "invitationParam": "xBFT6QJ4HAk8qznndDbm39ao95VrO468wslsWLFXHDJTQbN8BMNPRHTSeLl8mxNWGKkiTvqUfbS39WlBwUmGJdmFZ9IeoV5eruoW4mmc5LAzBeBPLTRU5BtdFccQPlZv" - }, - "kind": "ConfigMap", - "metadata": { - "creationTimestamp": "2021-10-13T13:02:42Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:data": { - ".": {}, - "f:adminMail": {}, - "f:customerGUID": {}, - "f:invitationParam": {} - } - }, - "manager": "kubescape", - "operation": "Update", - "time": "2021-10-13T13:02:42Z" - } - ], - "name": "kubescape", - "namespace": "default", - "resourceVersion": "61510200", - "uid": "b8d8b7a6-3648-437f-a1bd-2b5e68559a2b" - } - }, - { - "apiVersion": "v1", - "data": { - "ca.crt": "-----BEGIN CERTIFICATE-----\nMIIDKzCCAhOgAwIBAgIRAMBGTjKUoXZJUSsyFzT8p0kwDQYJKoZIhvcNAQELBQAw\nLzEtMCsGA1UEAxMkYWNhYWI4YzYtYjJlMS00MWU3LTgxODUtOTBjMTY5OWIyNjY5\nMB4XDTIxMDYxMzEyNDAwNFoXDTI2MDYxMjEzNDAwNFowLzEtMCsGA1UEAxMkYWNh\nYWI4YzYtYjJlMS00MWU3LTgxODUtOTBjMTY5OWIyNjY5MIIBIjANBgkqhkiG9w0B\nAQEFAAOCAQ8AMIIBCgKCAQEArMr22bWL/JTBDmg0Ax+neJJtJkbIODd0qGdMUH/P\nxm5uPWhKlpsOvglvDrzBkdNnlIkBth0lIQ8blenQjMUlMlbpIV3snRaFe3IiZZgN\niEidHGUkTuWNJQUoCyoL81388gtMc6yl83fBbu9hw3oc1FVfu+fCKnQ/cAu49Kkl\nSnEzAJ6gWjLjz+Qw6VEmKTZF8xgm7uxFAs3PMN5Gso8Uv3d2ONx37iR5YBXNcS6Q\nlcsGkeqjHLfYrqik/DuQxC7hIiN/Q+SQmMD8z7/so6c06PNjTc9F03xUEj0qFJ6H\nO1+QkcFwngl7XGVOUp0cKKxXMKktjLurFtJ74h3qDBzc7QIDAQABo0IwQDAOBgNV\nHQ8BAf8EBAMCAgQwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUGmiF5d7FBvx6\nDXzO1lh/nn6wGMwwDQYJKoZIhvcNAQELBQADggEBAErfrUxGv3Mi8d1r9gggo43I\nMhYZtojgYn+HWQq9HzvkYrPy+/Z5Xr7juyHdF7n16Pt/DQJ+tPwOvcgYqz/5z/vz\nxCWlJqVPK/oTuxK5aBWDkt6tOiHMGawRArW6sYCtIk9sbiJaZPC4p0YZijdNljKQ\n5oxkzlHVAYIr/tBO8mSJUtFpwDlZrJXt2RY7444SP1GPLAjojMM21q/7+ewcsMI1\nriGI+RDNMBI0n8vlDppNo7HbZg/seYvgwFIZaRLY3y4rJr4zsAzeTUtd9XQ6vSro\nyqtRDVGGzrzxP+I01PhkEzmda/+MbcBzE+tNLkhGqw6PsLuNK+63BHAC4Cv5fCY=\n-----END CERTIFICATE-----\n" - }, - "kind": "ConfigMap", - "metadata": { - "creationTimestamp": "2021-07-27T19:59:29Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:data": { - ".": {}, - "f:ca.crt": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-07-27T19:59:29Z" - } - ], - "name": "kube-root-ca.crt", - "namespace": "hipster", - "resourceVersion": "24370765", - "uid": "bb9ff0e3-1134-4d1e-b7d4-33f00d8361bf" - } - }, - { - "apiVersion": "v1", - "data": { - "ca.crt": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" - }, - "kind": "ConfigMap", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:data": { - ".": {}, - "f:ca.crt": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:15Z" - } - ], - "name": "kube-root-ca.crt", - "namespace": "kube-node-lease", - "resourceVersion": "289", - "uid": "1471c253-e4de-4291-a653-40107e58165c" - } - }, - { - "apiVersion": "v1", - "data": { - "ca.crt": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" - }, - "kind": "ConfigMap", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:data": { - ".": {}, - "f:ca.crt": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:15Z" - } - ], - "name": "kube-root-ca.crt", - "namespace": "kube-public", - "resourceVersion": "288", - "uid": "4ff7bd82-4f35-485c-91c8-b00fc9f4a7bc" - } - }, - { - "apiVersion": "v1", - "kind": "ConfigMap", - "metadata": { - "annotations": { - "control-plane.alpha.kubernetes.io/leader": "{\"holderIdentity\":\"gke-5fff0be6dc154d86a353-db29-b8b4-vm\",\"leaseDurationSeconds\":15,\"acquireTime\":\"2021-09-24T16:46:50Z\",\"renewTime\":\"2021-10-13T14:30:39Z\",\"leaderTransitions\":13}" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:control-plane.alpha.kubernetes.io/leader": {} - } - } - }, - "manager": "kubestore_collector", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "cluster-kubestore", - "namespace": "kube-system", - "resourceVersion": "61538361", - "uid": "c2a80331-1794-4f2f-bdf5-b8ae806d8917" - } - }, - { - "apiVersion": "v1", - "kind": "ConfigMap", - "metadata": { - "annotations": { - "control-plane.alpha.kubernetes.io/leader": "{\"holderIdentity\":\"gke-5fff0be6dc154d86a353-db29-b8b4-vm\",\"leaseDurationSeconds\":15,\"acquireTime\":\"2021-09-24T16:46:42Z\",\"renewTime\":\"2021-10-13T14:30:39Z\",\"leaderTransitions\":13}" - }, - "creationTimestamp": "2021-06-13T13:42:25Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:control-plane.alpha.kubernetes.io/leader": {} - } - } - }, - "manager": "clustermetrics", - "operation": "Update", - "time": "2021-06-13T13:42:25Z" - } - ], - "name": "clustermetrics", - "namespace": "kube-system", - "resourceVersion": "61538365", - "uid": "c61c23bc-ba7a-4bc4-a9e1-4556cd4b9f14" - } - }, - { - "apiVersion": "v1", - "data": { - "client-ca-file": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", - "requestheader-allowed-names": "[\"aggregator\"]", - "requestheader-client-ca-file": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", - "requestheader-extra-headers-prefix": "[\"X-Remote-Extra-\"]", - "requestheader-group-headers": "[\"X-Remote-Group\"]", - "requestheader-username-headers": "[\"X-Remote-User\"]" - }, - "kind": "ConfigMap", - "metadata": { - "creationTimestamp": "2021-06-13T13:41:59Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:data": { - ".": {}, - "f:client-ca-file": {}, - "f:requestheader-allowed-names": {}, - "f:requestheader-client-ca-file": {}, - "f:requestheader-extra-headers-prefix": {}, - "f:requestheader-group-headers": {}, - "f:requestheader-username-headers": {} - } - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:41:59Z" - } - ], - "name": "extension-apiserver-authentication", - "namespace": "kube-system", - "resourceVersion": "13", - "uid": "47bd73ec-6cc2-4e8e-92df-24765cc5b09b" - } - }, - { - "apiVersion": "v1", - "kind": "ConfigMap", - "metadata": { - "annotations": { - "control-plane.alpha.kubernetes.io/leader": "{\"holderIdentity\":\"gke-5fff0be6dc154d86a353-db29-b8b4-vm_59831\",\"leaseDurationSeconds\":15,\"acquireTime\":\"2021-09-24T16:46:40Z\",\"renewTime\":\"2021-10-13T14:30:39Z\",\"leaderTransitions\":13}" - }, - "creationTimestamp": "2021-06-13T13:42:25Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:control-plane.alpha.kubernetes.io/leader": {} - } - } - }, - "manager": "gke-common-webhooks", - "operation": "Update", - "time": "2021-06-13T13:42:25Z" - } - ], - "name": "gke-common-webhook-lock", - "namespace": "kube-system", - "resourceVersion": "61538363", - "uid": "baaef587-e438-46b3-80aa-440aa35c63df" - } - }, - { - "apiVersion": "v1", - "kind": "ConfigMap", - "metadata": { - "annotations": { - "control-plane.alpha.kubernetes.io/leader": "{\"holderIdentity\":\"gke-5fff0be6dc154d86a353-db29-b8b4-vm_edc05\",\"leaseDurationSeconds\":15,\"acquireTime\":\"2021-09-24T16:46:46Z\",\"renewTime\":\"2021-10-13T14:30:39Z\",\"leaderTransitions\":13}" - }, - "creationTimestamp": "2021-06-13T13:42:40Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:control-plane.alpha.kubernetes.io/leader": {} - } - } - }, - "manager": "glbc", - "operation": "Update", - "time": "2021-06-13T13:42:40Z" - } - ], - "name": "ingress-gce-lock", - "namespace": "kube-system", - "resourceVersion": "61538360", - "uid": "7e3e9f44-397e-4585-bbca-8a112eae72a7" - } - }, - { - "apiVersion": "v1", - "data": { - "provider-uid": "1a2436d67141951b", - "uid": "1a2436d67141951b" - }, - "kind": "ConfigMap", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:36Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:data": { - ".": {}, - "f:provider-uid": {}, - "f:uid": {} - } - }, - "manager": "glbc", - "operation": "Update", - "time": "2021-06-13T13:42:36Z" - } - ], - "name": "ingress-uid", - "namespace": "kube-system", - "resourceVersion": "776", - "uid": "5f2c09b4-f106-4c60-b77f-903ac033d526" - } - }, - { - "apiVersion": "v1", - "kind": "ConfigMap", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:17Z", - "labels": { - "addonmanager.kubernetes.io/mode": "EnsureExists" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "298", - "uid": "284fe709-97e1-46f5-86ba-fec23163a500" - } - }, - { - "apiVersion": "v1", - "data": { - "linear": "{\"coresPerReplica\":256,\"includeUnschedulableNodes\":true,\"nodesPerReplica\":16,\"preventSinglePointFailure\":true}" - }, - "kind": "ConfigMap", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:36Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:data": { - ".": {}, - "f:linear": {} - } - }, - "manager": "cluster-proportional-autoscaler", - "operation": "Update", - "time": "2021-06-13T13:42:36Z" - } - ], - "name": "kube-dns-autoscaler", - "namespace": "kube-system", - "resourceVersion": "778", - "uid": "c13f020e-9e2c-4aae-8d51-b97e5c017e79" - } - }, - { - "apiVersion": "v1", - "data": { - "ca.crt": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" - }, - "kind": "ConfigMap", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:15Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:data": { - ".": {}, - "f:ca.crt": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:15Z" - } - ], - "name": "kube-root-ca.crt", - "namespace": "kube-system", - "resourceVersion": "284", - "uid": "da8e45b0-a8a8-4084-9824-55db603eb5ac" - } - }, - { - "apiVersion": "v1", - "data": { - "kubedns.dnsmasq-nanny": "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1", - "kubedns.kube-dns": "gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1", - "kubedns.prom-to-sd": "gke.gcr.io/prometheus-to-sd:v0.4.2", - "kubedns.sidecar": "gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1" - }, - "kind": "ConfigMap", - "metadata": { - "annotations": { - "components.gke.io/image-map": "Images deployed by operator", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"data\":{\"kubedns.dnsmasq-nanny\":\"gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1\",\"kubedns.kube-dns\":\"gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1\",\"kubedns.prom-to-sd\":\"gke.gcr.io/prometheus-to-sd:v0.4.2\",\"kubedns.sidecar\":\"gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1\"},\"kind\":\"ConfigMap\",\"metadata\":{\"annotations\":{\"components.gke.io/image-map\":\"Images deployed by operator\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubedns.cloud.google.com/operator-system\":\"true\"},\"name\":\"kubedns-config-images\",\"namespace\":\"kube-system\"}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubedns.cloud.google.com/operator-system": "true" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:data": { - ".": {}, - "f:kubedns.prom-to-sd": {} - }, - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/image-map": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubedns.cloud.google.com/operator-system": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:data": { - "f:kubedns.dnsmasq-nanny": {}, - "f:kubedns.kube-dns": {}, - "f:kubedns.sidecar": {} - }, - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:09Z" - } - ], - "name": "kubedns-config-images", - "namespace": "kube-system", - "resourceVersion": "46217993", - "uid": "d1bf6814-95eb-4c38-8fe0-b076a1b78f9e" - } - }, - { - "apiVersion": "v1", - "data": { - "NannyConfiguration": "apiVersion: nannyconfig/v1alpha1\nkind: NannyConfiguration" - }, - "kind": "ConfigMap", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:17Z", - "labels": { - "addonmanager.kubernetes.io/mode": "EnsureExists", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:data": { - ".": {}, - "f:NannyConfiguration": {} - }, - "f:metadata": { - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - } - ], - "name": "metadata-agent-config", - "namespace": "kube-system", - "resourceVersion": "304", - "uid": "2461e818-1d26-45d4-bbe5-d1c507c55031" - } - }, - { - "apiVersion": "v1", - "data": { - "NannyConfiguration": "apiVersion: nannyconfig/v1alpha1\nkind: NannyConfiguration" - }, - "kind": "ConfigMap", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:18Z", - "labels": { - "addonmanager.kubernetes.io/mode": "EnsureExists", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:data": { - ".": {}, - "f:NannyConfiguration": {} - }, - "f:metadata": { - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:18Z" - } - ], - "name": "metrics-server-config", - "namespace": "kube-system", - "resourceVersion": "305", - "uid": "fc78b6c0-af72-4040-a96a-61f20d2c2637" - } - }, - { - "apiVersion": "v1", - "data": { - "Corefile": "cluster.local:53 {\n errors\n cache {\n success 9984 30\n denial 9984 5\n }\n reload\n loop\n \n bind 169.254.20.10 10.72.0.10\n health 169.254.20.10:8080\n \n forward . __PILLAR__CLUSTER__DNS__ {\n force_tcp\n expire 1s\n }\n prometheus :9253\n }\nin-addr.arpa:53 {\n errors\n cache 30\n reload\n loop\n \n bind 169.254.20.10 10.72.0.10\n \n forward . __PILLAR__CLUSTER__DNS__ {\n force_tcp\n expire 1s\n }\n prometheus :9253\n }\nip6.arpa:53 {\n errors\n cache 30\n reload\n loop\n \n bind 169.254.20.10 10.72.0.10\n \n forward . __PILLAR__CLUSTER__DNS__ {\n force_tcp\n expire 1s\n }\n prometheus :9253\n }\n.:53 {\n errors\n cache 30\n reload\n loop\n \n bind 169.254.20.10 10.72.0.10\n \n forward . __PILLAR__UPSTREAM__SERVERS__ {\n force_tcp\n }\n prometheus :9253\n }\n" - }, - "kind": "ConfigMap", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"data\":{\"Corefile\":\"cluster.local:53 {\\n errors\\n cache {\\n success 9984 30\\n denial 9984 5\\n }\\n reload\\n loop\\n \\n bind 169.254.20.10 10.72.0.10\\n health 169.254.20.10:8080\\n \\n forward . __PILLAR__CLUSTER__DNS__ {\\n force_tcp\\n expire 1s\\n }\\n prometheus :9253\\n }\\nin-addr.arpa:53 {\\n errors\\n cache 30\\n reload\\n loop\\n \\n bind 169.254.20.10 10.72.0.10\\n \\n forward . __PILLAR__CLUSTER__DNS__ {\\n force_tcp\\n expire 1s\\n }\\n prometheus :9253\\n }\\nip6.arpa:53 {\\n errors\\n cache 30\\n reload\\n loop\\n \\n bind 169.254.20.10 10.72.0.10\\n \\n forward . __PILLAR__CLUSTER__DNS__ {\\n force_tcp\\n expire 1s\\n }\\n prometheus :9253\\n }\\n.:53 {\\n errors\\n cache 30\\n reload\\n loop\\n \\n bind 169.254.20.10 10.72.0.10\\n \\n forward . __PILLAR__UPSTREAM__SERVERS__ {\\n force_tcp\\n }\\n prometheus :9253\\n }\\n\"},\"kind\":\"ConfigMap\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:data": { - ".": {}, - "f:Corefile": {} - }, - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:28Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "24083518", - "uid": "38b6b752-48e9-4ccb-ab12-d6335c502769" - } - } - ], - "listInputKinds": null - } - ], - "remediation": "Use Kubernetes secrets or Key Management Systems to store credentials.", - "description": "Attackers who have access to configuration files can steal the stored secrets and use them. This control checks if ConfigMaps or pod specifications have sensitive information in their configuration.", - "score": 90 - }, - { - "guid": "", - "attributes": { - "armoBuiltin": true, - "microsoftMitreColumns": [ - "Privilege escalation" - ] - }, - "id": "C-0035", - "controlID": "C-0035", - "name": "Cluster-admin binding", - "ruleReports": [ - { - "name": "rule-list-all-cluster-admins", - "remediation": "", - "ruleStatus": { - "status": "success", - "message": "" - }, - "ruleResponses": [ - { - "alertMessage": "The following ServiceAccount: ca-controller-service-account have high privileges, such as cluster-admin", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-controller-roles\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-controller-roles\"},\"rules\":[{\"apiGroups\":[\"*\"],\"resources\":[\"*\"],\"verbs\":[\"*\"]}]}\n" - }, - "creationTimestamp": "2021-10-12T00:18:37Z", - "labels": { - "app": "ca-controller-roles", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:37Z" - } - ], - "name": "ca-controller-roles", - "resourceVersion": "60786655", - "uid": "3f00accb-c624-4e94-9cfd-40feae054fdd" - }, - "rules": [ - { - "apiGroups": [ - "*" - ], - "resources": [ - "*" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-controller-role-binding\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-controller-role-binding\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"ca-controller-roles\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"ca-controller-service-account\",\"namespace\":\"cyberarmor-system\"}]}\n" - }, - "creationTimestamp": "2021-10-12T00:18:37Z", - "labels": { - "app": "ca-controller-role-binding", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:37Z" - } - ], - "name": "ca-controller-role-binding", - "resourceVersion": "60786656", - "uid": "cfba68fb-640f-48da-937f-280051340148" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "ca-controller-roles" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "ca-controller-service-account", - "namespace": "cyberarmor-system" - } - ] - } - ], - "externalObjects": { - "subject": [ - { - "kind": "ServiceAccount", - "name": "ca-controller-service-account", - "namespace": "cyberarmor-system" - } - ] - } - }, - "exception": { - "guid": "273f8948-d6f4-440b-a81e-83253f8f28cc", - "name": "exception_C-0035__972db72a7aea7fa294cd586a420ff11c", - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-13T13:03:30.161302", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "namespace": "" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Cluster-admin binding", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "The following Group: system:masters have high privileges, such as cluster-admin", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "cluster-admin", - "resourceVersion": "42", - "uid": "dd8cbb89-6ebd-4010-94a7-ef54d64078ec" - }, - "rules": [ - { - "apiGroups": [ - "*" - ], - "resources": [ - "*" - ], - "verbs": [ - "*" - ] - }, - { - "nonResourceURLs": [ - "*" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "cluster-admin", - "resourceVersion": "100", - "uid": "767593c3-9a03-487f-9feb-0ce68bcb7cb7" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "cluster-admin" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Group", - "name": "system:masters" - } - ] - } - ], - "externalObjects": { - "subject": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Group", - "name": "system:masters" - } - ] - } - }, - "exception": { - "guid": "3557bae3-160c-4714-b038-78736ddd3e37", - "name": "exception_C-0035_cluster-admin_4e99b8d194130381aa443eaa1912c162", - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-11T08:36:03.424219", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "kind": "ClusterRoleBinding", - "name": "cluster-admin", - "namespace": "" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Cluster-admin binding", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "The following ServiceAccount: olm-operator-serviceaccount have high privileges, such as cluster-admin", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:45:58Z", - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:rules": {} - }, - "manager": "px", - "operation": "Update", - "time": "2021-08-12T11:45:58Z" - } - ], - "name": "system:controller:operator-lifecycle-manager", - "resourceVersion": "31981650", - "uid": "d453b876-674d-4aeb-a6d6-bf405e034eb1" - }, - "rules": [ - { - "apiGroups": [ - "*" - ], - "resources": [ - "*" - ], - "verbs": [ - "*" - ] - }, - { - "nonResourceURLs": [ - "*" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "creationTimestamp": "2021-08-31T19:47:18Z", - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "px", - "operation": "Update", - "time": "2021-08-31T19:47:18Z" - } - ], - "name": "olm-operator-cluster-binding-olm", - "resourceVersion": "41268496", - "uid": "ee936583-82fd-44ad-a4a1-3b2c4ccdfca5" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:operator-lifecycle-manager" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "olm-operator-serviceaccount", - "namespace": "olm" - } - ] - } - ], - "externalObjects": { - "subject": [ - { - "kind": "ServiceAccount", - "name": "olm-operator-serviceaccount", - "namespace": "olm" - } - ] - } - }, - "exception": { - "guid": "e56a7358-418d-42be-a1c8-1e8dbc3ae197", - "name": "exception_C-0035_olm-operator-cluster-binding-olm_4fe0eeb87f6d1ca1bea09dfb11b402f3", - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-11T08:35:54.463542", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "kind": "ClusterRoleBinding", - "name": "olm-operator-cluster-binding-olm", - "namespace": "" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Cluster-admin binding", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "The following ServiceAccount: olm-operator-serviceaccount have high privileges, such as cluster-admin", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:45:58Z", - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:rules": {} - }, - "manager": "px", - "operation": "Update", - "time": "2021-08-12T11:45:58Z" - } - ], - "name": "system:controller:operator-lifecycle-manager", - "resourceVersion": "31981650", - "uid": "d453b876-674d-4aeb-a6d6-bf405e034eb1" - }, - "rules": [ - { - "apiGroups": [ - "*" - ], - "resources": [ - "*" - ], - "verbs": [ - "*" - ] - }, - { - "nonResourceURLs": [ - "*" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "creationTimestamp": "2021-08-12T11:45:59Z", - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "px", - "operation": "Update", - "time": "2021-08-12T11:45:58Z" - } - ], - "name": "olm-operator-binding-olm", - "resourceVersion": "31981653", - "uid": "785e5e62-2730-4cb4-aea1-7d070f715b4b" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:operator-lifecycle-manager" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "olm-operator-serviceaccount", - "namespace": "olm" - } - ] - } - ], - "externalObjects": { - "subject": [ - { - "kind": "ServiceAccount", - "name": "olm-operator-serviceaccount", - "namespace": "olm" - } - ] - } - }, - "exception": { - "guid": "273f8948-d6f4-440b-a81e-83253f8f28cc", - "name": "exception_C-0035__972db72a7aea7fa294cd586a420ff11c", - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-13T13:03:30.161302", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "namespace": "" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Cluster-admin binding", - "ruleName": "" - } - ] - } - } - ], - "listInputResources": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "Role", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:bootstrap-signer", - "namespace": "kube-public", - "resourceVersion": "139", - "uid": "2e994ff2-5b52-4363-b798-7de1d99ba7c5" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resourceNames": [ - "cluster-info" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "Role", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"kubernetes.io/deprecation\":\"cloud-provider role is DEPRECATED in the concern of potential collisions and will be removed in 1.16. Do not use this role.\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"cloud-provider\",\"namespace\":\"kube-system\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\"],\"verbs\":[\"create\",\"get\",\"patch\",\"update\",\"list\",\"watch\"]}]}\n", - "kubernetes.io/deprecation": "cloud-provider role is DEPRECATED in the concern of potential collisions and will be removed in 1.16. Do not use this role." - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {}, - "f:kubernetes.io/deprecation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "cloud-provider", - "namespace": "kube-system", - "resourceVersion": "595", - "uid": "24d94597-f68c-46ce-818f-59ba5747e511" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "create", - "get", - "patch", - "update", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "Role", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "extension-apiserver-authentication-reader", - "namespace": "kube-system", - "resourceVersion": "140", - "uid": "ae96d736-b532-49c4-acab-791ab5e41e3c" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resourceNames": [ - "extension-apiserver-authentication" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "Role", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"gce:cloud-provider\",\"namespace\":\"kube-system\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\"],\"verbs\":[\"create\",\"get\",\"patch\",\"update\",\"list\",\"watch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "gce:cloud-provider", - "namespace": "kube-system", - "resourceVersion": "593", - "uid": "e9a82559-98a2-4a8d-a109-dd3a93358398" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "create", - "get", - "patch", - "update", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "Role", - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-leaderelection\",\"namespace\":\"kube-system\"},\"rules\":[{\"apiGroups\":[\"coordination.k8s.io\"],\"resources\":[\"leases\"],\"verbs\":[\"get\",\"watch\",\"list\",\"delete\",\"update\",\"create\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-leaderelection", - "namespace": "kube-system", - "resourceVersion": "477", - "uid": "76762703-cd72-445b-b0f9-ec5092dea5f2" - }, - "rules": [ - { - "apiGroups": [ - "coordination.k8s.io" - ], - "resources": [ - "leases" - ], - "verbs": [ - "get", - "watch", - "list", - "delete", - "update", - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "Role", - "metadata": { - "annotations": { - "components.gke.io/component-name": "snapshot-controller", - "components.gke.io/component-version": "0.5.5", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"snapshot-controller\",\"components.gke.io/component-version\":\"0.5.5\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"snapshot-controller-leaderelection\",\"namespace\":\"kube-system\"},\"rules\":[{\"apiGroups\":[\"coordination.k8s.io\"],\"resources\":[\"leases\"],\"verbs\":[\"get\",\"watch\",\"list\",\"delete\",\"update\",\"create\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/layer": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:42Z" - } - ], - "name": "snapshot-controller-leaderelection", - "namespace": "kube-system", - "resourceVersion": "41911916", - "uid": "fbe86365-fcf5-4fb6-85cf-e80c36778142" - }, - "rules": [ - { - "apiGroups": [ - "coordination.k8s.io" - ], - "resources": [ - "leases" - ], - "verbs": [ - "get", - "watch", - "list", - "delete", - "update", - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "Role", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system::leader-locking-kube-controller-manager", - "namespace": "kube-system", - "resourceVersion": "144", - "uid": "841cd76c-388f-4f35-bd22-d4917fe0a5a5" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resourceNames": [ - "kube-controller-manager" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "get", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "Role", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system::leader-locking-kube-scheduler", - "namespace": "kube-system", - "resourceVersion": "145", - "uid": "f3e088e0-b13b-416e-abcb-93b497c7920d" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resourceNames": [ - "kube-scheduler" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "get", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "Role", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:bootstrap-signer", - "namespace": "kube-system", - "resourceVersion": "141", - "uid": "dadcb66c-d736-4eaa-b951-93ffb138938e" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "secrets" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "Role", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:cloud-provider", - "namespace": "kube-system", - "resourceVersion": "142", - "uid": "2cb6ddd2-3896-4720-a3c3-9f0050e3bec2" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "create", - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "Role", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:controller:glbc\",\"namespace\":\"kube-system\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\",\"create\",\"patch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:30Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:30Z" - } - ], - "name": "system:controller:glbc", - "namespace": "kube-system", - "resourceVersion": "606", - "uid": "5438c4ff-a5fa-4542-b751-3624f036d977" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "get", - "list", - "watch", - "update", - "create", - "patch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "Role", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:token-cleaner", - "namespace": "kube-system", - "resourceVersion": "143", - "uid": "ea7085cb-6095-432b-a8d3-e0300005d92e" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "secrets" - ], - "verbs": [ - "delete", - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "aggregationRule": { - "clusterRoleSelectors": [ - { - "matchLabels": { - "rbac.authorization.k8s.io/aggregate-to-admin": "true" - } - } - ] - }, - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:aggregationRule": { - ".": {}, - "f:clusterRoleSelectors": {} - }, - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - } - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:rules": {} - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:15Z" - } - ], - "name": "admin", - "resourceVersion": "31982306", - "uid": "da9dd224-4007-41c9-8234-4abe65b7bd14" - }, - "rules": [ - { - "apiGroups": [ - "operators.coreos.com" - ], - "resources": [ - "subscriptions" - ], - "verbs": [ - "create", - "update", - "patch", - "delete" - ] - }, - { - "apiGroups": [ - "operators.coreos.com" - ], - "resources": [ - "clusterserviceversions", - "catalogsources", - "installplans", - "subscriptions" - ], - "verbs": [ - "delete" - ] - }, - { - "apiGroups": [ - "operators.coreos.com" - ], - "resources": [ - "clusterserviceversions", - "catalogsources", - "installplans", - "subscriptions", - "operatorgroups" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "packages.operators.coreos.com" - ], - "resources": [ - "packagemanifests", - "packagemanifests/icon" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods/attach", - "pods/exec", - "pods/portforward", - "pods/proxy", - "secrets", - "services/proxy" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "serviceaccounts" - ], - "verbs": [ - "impersonate" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods", - "pods/attach", - "pods/exec", - "pods/portforward", - "pods/proxy" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps", - "endpoints", - "persistentvolumeclaims", - "replicationcontrollers", - "replicationcontrollers/scale", - "secrets", - "serviceaccounts", - "services", - "services/proxy" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "daemonsets", - "deployments", - "deployments/rollback", - "deployments/scale", - "replicasets", - "replicasets/scale", - "statefulsets", - "statefulsets/scale" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "autoscaling" - ], - "resources": [ - "horizontalpodautoscalers" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "cronjobs", - "jobs" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "extensions" - ], - "resources": [ - "daemonsets", - "deployments", - "deployments/rollback", - "deployments/scale", - "ingresses", - "networkpolicies", - "replicasets", - "replicasets/scale", - "replicationcontrollers/scale" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "policy" - ], - "resources": [ - "poddisruptionbudgets" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "networking.k8s.io" - ], - "resources": [ - "ingresses", - "networkpolicies" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps", - "endpoints", - "persistentvolumeclaims", - "persistentvolumeclaims/status", - "pods", - "replicationcontrollers", - "replicationcontrollers/scale", - "serviceaccounts", - "services", - "services/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "bindings", - "events", - "limitranges", - "namespaces/status", - "pods/log", - "pods/status", - "replicationcontrollers/status", - "resourcequotas", - "resourcequotas/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "namespaces" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "controllerrevisions", - "daemonsets", - "daemonsets/status", - "deployments", - "deployments/scale", - "deployments/status", - "replicasets", - "replicasets/scale", - "replicasets/status", - "statefulsets", - "statefulsets/scale", - "statefulsets/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "autoscaling" - ], - "resources": [ - "horizontalpodautoscalers", - "horizontalpodautoscalers/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "cronjobs", - "cronjobs/status", - "jobs", - "jobs/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "extensions" - ], - "resources": [ - "daemonsets", - "daemonsets/status", - "deployments", - "deployments/scale", - "deployments/status", - "ingresses", - "ingresses/status", - "networkpolicies", - "replicasets", - "replicasets/scale", - "replicasets/status", - "replicationcontrollers/scale" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "policy" - ], - "resources": [ - "poddisruptionbudgets", - "poddisruptionbudgets/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "networking.k8s.io" - ], - "resources": [ - "ingresses", - "ingresses/status", - "networkpolicies" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apiextensions.k8s.io" - ], - "resourceNames": [ - "viziers.px.dev" - ], - "resources": [ - "customresourcedefinitions" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "px.dev" - ], - "resources": [ - "viziers" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "px.dev" - ], - "resources": [ - "viziers" - ], - "verbs": [ - "create", - "update", - "patch", - "delete" - ] - }, - { - "apiGroups": [ - "authorization.k8s.io" - ], - "resources": [ - "localsubjectaccessreviews" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "rbac.authorization.k8s.io" - ], - "resources": [ - "rolebindings", - "roles" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "get", - "list", - "patch", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "px.dev" - ], - "resources": [ - "viziers" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:45:59Z", - "labels": { - "rbac.authorization.k8s.io/aggregate-to-admin": "true", - "rbac.authorization.k8s.io/aggregate-to-edit": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:rbac.authorization.k8s.io/aggregate-to-admin": {}, - "f:rbac.authorization.k8s.io/aggregate-to-edit": {} - } - }, - "f:rules": {} - }, - "manager": "px", - "operation": "Update", - "time": "2021-08-12T11:45:59Z" - } - ], - "name": "aggregate-olm-edit", - "resourceVersion": "31981659", - "uid": "90e90468-8b0b-4461-b45e-ba7d6186d727" - }, - "rules": [ - { - "apiGroups": [ - "operators.coreos.com" - ], - "resources": [ - "subscriptions" - ], - "verbs": [ - "create", - "update", - "patch", - "delete" - ] - }, - { - "apiGroups": [ - "operators.coreos.com" - ], - "resources": [ - "clusterserviceversions", - "catalogsources", - "installplans", - "subscriptions" - ], - "verbs": [ - "delete" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:45:59Z", - "labels": { - "rbac.authorization.k8s.io/aggregate-to-admin": "true", - "rbac.authorization.k8s.io/aggregate-to-edit": "true", - "rbac.authorization.k8s.io/aggregate-to-view": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:rbac.authorization.k8s.io/aggregate-to-admin": {}, - "f:rbac.authorization.k8s.io/aggregate-to-edit": {}, - "f:rbac.authorization.k8s.io/aggregate-to-view": {} - } - }, - "f:rules": {} - }, - "manager": "px", - "operation": "Update", - "time": "2021-08-12T11:45:59Z" - } - ], - "name": "aggregate-olm-view", - "resourceVersion": "31981661", - "uid": "ff48047f-24f2-4cab-be38-0b2d4f51edb3" - }, - "rules": [ - { - "apiGroups": [ - "operators.coreos.com" - ], - "resources": [ - "clusterserviceversions", - "catalogsources", - "installplans", - "subscriptions", - "operatorgroups" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "packages.operators.coreos.com" - ], - "resources": [ - "packagemanifests", - "packagemanifests/icon" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-controller-roles\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-controller-roles\"},\"rules\":[{\"apiGroups\":[\"*\"],\"resources\":[\"*\"],\"verbs\":[\"*\"]}]}\n" - }, - "creationTimestamp": "2021-10-12T00:18:37Z", - "labels": { - "app": "ca-controller-roles", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:37Z" - } - ], - "name": "ca-controller-roles", - "resourceVersion": "60786655", - "uid": "3f00accb-c624-4e94-9cfd-40feae054fdd" - }, - "rules": [ - { - "apiGroups": [ - "*" - ], - "resources": [ - "*" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"kubernetes.io/deprecation\":\"cloud-provider clusterrole is DEPRECATED in the concern of potential collisions and will be removed in 1.16. Do not use this role.\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"cloud-provider\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"create\",\"patch\",\"update\"]}]}\n", - "kubernetes.io/deprecation": "cloud-provider clusterrole is DEPRECATED in the concern of potential collisions and will be removed in 1.16. Do not use this role." - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {}, - "f:kubernetes.io/deprecation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "cloud-provider", - "resourceVersion": "597", - "uid": "590ac0f5-b83c-49b2-9389-99af6c1cf9c3" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "cluster-admin", - "resourceVersion": "42", - "uid": "dd8cbb89-6ebd-4010-94a7-ef54d64078ec" - }, - "rules": [ - { - "apiGroups": [ - "*" - ], - "resources": [ - "*" - ], - "verbs": [ - "*" - ] - }, - { - "nonResourceURLs": [ - "*" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "aggregationRule": { - "clusterRoleSelectors": [ - { - "matchLabels": { - "rbac.authorization.k8s.io/aggregate-to-edit": "true" - } - } - ] - }, - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults", - "rbac.authorization.k8s.io/aggregate-to-admin": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:aggregationRule": { - ".": {}, - "f:clusterRoleSelectors": {} - }, - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {}, - "f:rbac.authorization.k8s.io/aggregate-to-admin": {} - } - } - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:rules": {} - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:15Z" - } - ], - "name": "edit", - "resourceVersion": "31982305", - "uid": "a4bb4ea2-a82a-42e9-a952-a796ebdb0025" - }, - "rules": [ - { - "apiGroups": [ - "operators.coreos.com" - ], - "resources": [ - "subscriptions" - ], - "verbs": [ - "create", - "update", - "patch", - "delete" - ] - }, - { - "apiGroups": [ - "operators.coreos.com" - ], - "resources": [ - "clusterserviceversions", - "catalogsources", - "installplans", - "subscriptions" - ], - "verbs": [ - "delete" - ] - }, - { - "apiGroups": [ - "operators.coreos.com" - ], - "resources": [ - "clusterserviceversions", - "catalogsources", - "installplans", - "subscriptions", - "operatorgroups" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "packages.operators.coreos.com" - ], - "resources": [ - "packagemanifests", - "packagemanifests/icon" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods/attach", - "pods/exec", - "pods/portforward", - "pods/proxy", - "secrets", - "services/proxy" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "serviceaccounts" - ], - "verbs": [ - "impersonate" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods", - "pods/attach", - "pods/exec", - "pods/portforward", - "pods/proxy" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps", - "endpoints", - "persistentvolumeclaims", - "replicationcontrollers", - "replicationcontrollers/scale", - "secrets", - "serviceaccounts", - "services", - "services/proxy" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "daemonsets", - "deployments", - "deployments/rollback", - "deployments/scale", - "replicasets", - "replicasets/scale", - "statefulsets", - "statefulsets/scale" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "autoscaling" - ], - "resources": [ - "horizontalpodautoscalers" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "cronjobs", - "jobs" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "extensions" - ], - "resources": [ - "daemonsets", - "deployments", - "deployments/rollback", - "deployments/scale", - "ingresses", - "networkpolicies", - "replicasets", - "replicasets/scale", - "replicationcontrollers/scale" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "policy" - ], - "resources": [ - "poddisruptionbudgets" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "networking.k8s.io" - ], - "resources": [ - "ingresses", - "networkpolicies" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps", - "endpoints", - "persistentvolumeclaims", - "persistentvolumeclaims/status", - "pods", - "replicationcontrollers", - "replicationcontrollers/scale", - "serviceaccounts", - "services", - "services/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "bindings", - "events", - "limitranges", - "namespaces/status", - "pods/log", - "pods/status", - "replicationcontrollers/status", - "resourcequotas", - "resourcequotas/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "namespaces" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "controllerrevisions", - "daemonsets", - "daemonsets/status", - "deployments", - "deployments/scale", - "deployments/status", - "replicasets", - "replicasets/scale", - "replicasets/status", - "statefulsets", - "statefulsets/scale", - "statefulsets/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "autoscaling" - ], - "resources": [ - "horizontalpodautoscalers", - "horizontalpodautoscalers/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "cronjobs", - "cronjobs/status", - "jobs", - "jobs/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "extensions" - ], - "resources": [ - "daemonsets", - "daemonsets/status", - "deployments", - "deployments/scale", - "deployments/status", - "ingresses", - "ingresses/status", - "networkpolicies", - "replicasets", - "replicasets/scale", - "replicasets/status", - "replicationcontrollers/scale" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "policy" - ], - "resources": [ - "poddisruptionbudgets", - "poddisruptionbudgets/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "networking.k8s.io" - ], - "resources": [ - "ingresses", - "ingresses/status", - "networkpolicies" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apiextensions.k8s.io" - ], - "resourceNames": [ - "viziers.px.dev" - ], - "resources": [ - "customresourcedefinitions" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "px.dev" - ], - "resources": [ - "viziers" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "px.dev" - ], - "resources": [ - "viziers" - ], - "verbs": [ - "create", - "update", - "patch", - "delete" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"external-metrics-reader\"},\"rules\":[{\"apiGroups\":[\"external.metrics.k8s.io\"],\"resources\":[\"*\"],\"verbs\":[\"list\",\"get\",\"watch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "external-metrics-reader", - "resourceVersion": "575", - "uid": "fcf3c188-6c04-41ed-8668-6d7f1c6f5ccd" - }, - "rules": [ - { - "apiGroups": [ - "external.metrics.k8s.io" - ], - "resources": [ - "*" - ], - "verbs": [ - "list", - "get", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"gce:beta:kubelet-certificate-bootstrap\"},\"rules\":[{\"apiGroups\":[\"certificates.k8s.io\"],\"resources\":[\"certificatesigningrequests/nodeclient\"],\"verbs\":[\"create\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:30Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:30Z" - } - ], - "name": "gce:beta:kubelet-certificate-bootstrap", - "resourceVersion": "616", - "uid": "83892374-36c5-4fdc-a783-8bfdeda7a98a" - }, - "rules": [ - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resources": [ - "certificatesigningrequests/nodeclient" - ], - "verbs": [ - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"gce:beta:kubelet-certificate-rotation\"},\"rules\":[{\"apiGroups\":[\"certificates.k8s.io\"],\"resources\":[\"certificatesigningrequests/selfnodeclient\",\"certificatesigningrequests/selfnodeserver\"],\"verbs\":[\"create\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:30Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:30Z" - } - ], - "name": "gce:beta:kubelet-certificate-rotation", - "resourceVersion": "617", - "uid": "23944c05-810f-4d87-8213-467c7a86135f" - }, - "rules": [ - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resources": [ - "certificatesigningrequests/selfnodeclient", - "certificatesigningrequests/selfnodeserver" - ], - "verbs": [ - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"gce:cloud-provider\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"create\",\"patch\",\"update\"]},{\"apiGroups\":[\"\"],\"resources\":[\"services/status\"],\"verbs\":[\"patch\",\"update\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "gce:cloud-provider", - "resourceVersion": "594", - "uid": "469e657b-7953-4c15-b301-8761394d3ee0" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "services/status" - ], - "verbs": [ - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"gke-metrics-agent\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"nodes\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"pods\"],\"verbs\":[\"list\",\"watch\"]},{\"apiGroups\":[\"policy\"],\"resourceNames\":[\"gce.gke-metrics-agent\"],\"resources\":[\"podsecuritypolicies\"],\"verbs\":[\"use\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - } - ], - "name": "gke-metrics-agent", - "resourceVersion": "437", - "uid": "7833f6d5-6bcd-45a4-bfb3-40f62793511b" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "policy" - ], - "resourceNames": [ - "gce.gke-metrics-agent" - ], - "resources": [ - "podsecuritypolicies" - ], - "verbs": [ - "use" - ] - } - ] - }, - { - "aggregationRule": { - "clusterRoleSelectors": [ - { - "matchLabels": { - "olm.opgroup.permissions/aggregate-to-c287d32d82d2c74d-admin": "true" - } - } - ] - }, - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:46:09Z", - "labels": { - "olm.owner": "global-operators", - "olm.owner.kind": "OperatorGroup", - "olm.owner.namespace": "px-operator" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:rules": {} - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-08-31T19:48:24Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:aggregationRule": { - ".": {}, - "f:clusterRoleSelectors": {} - }, - "f:metadata": { - "f:labels": { - ".": {}, - "f:olm.owner": {}, - "f:olm.owner.kind": {}, - "f:olm.owner.namespace": {} - } - } - }, - "manager": "olm", - "operation": "Update", - "time": "2021-08-31T19:48:24Z" - } - ], - "name": "global-operators-admin", - "resourceVersion": "41269000", - "uid": "2390b0ae-4fbd-4238-99d5-d2f05d8bb37e" - }, - "rules": [ - { - "apiGroups": [ - "px.dev" - ], - "resources": [ - "viziers" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "aggregationRule": { - "clusterRoleSelectors": [ - { - "matchLabels": { - "olm.opgroup.permissions/aggregate-to-c287d32d82d2c74d-edit": "true" - } - } - ] - }, - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:46:09Z", - "labels": { - "olm.owner": "global-operators", - "olm.owner.kind": "OperatorGroup", - "olm.owner.namespace": "px-operator" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:rules": {} - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-08-31T19:48:24Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:aggregationRule": { - ".": {}, - "f:clusterRoleSelectors": {} - }, - "f:metadata": { - "f:labels": { - ".": {}, - "f:olm.owner": {}, - "f:olm.owner.kind": {}, - "f:olm.owner.namespace": {} - } - } - }, - "manager": "olm", - "operation": "Update", - "time": "2021-08-31T19:48:24Z" - } - ], - "name": "global-operators-edit", - "resourceVersion": "41269001", - "uid": "320745be-224b-4e41-99ff-25bcf8f2288e" - }, - "rules": [ - { - "apiGroups": [ - "px.dev" - ], - "resources": [ - "viziers" - ], - "verbs": [ - "create", - "update", - "patch", - "delete" - ] - } - ] - }, - { - "aggregationRule": { - "clusterRoleSelectors": [ - { - "matchLabels": { - "olm.opgroup.permissions/aggregate-to-c287d32d82d2c74d-view": "true" - } - } - ] - }, - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:46:09Z", - "labels": { - "olm.owner": "global-operators", - "olm.owner.kind": "OperatorGroup", - "olm.owner.namespace": "px-operator" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:rules": {} - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-08-31T19:48:24Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:aggregationRule": { - ".": {}, - "f:clusterRoleSelectors": {} - }, - "f:metadata": { - "f:labels": { - ".": {}, - "f:olm.owner": {}, - "f:olm.owner.kind": {}, - "f:olm.owner.namespace": {} - } - } - }, - "manager": "olm", - "operation": "Update", - "time": "2021-08-31T19:48:24Z" - } - ], - "name": "global-operators-view", - "resourceVersion": "41268999", - "uid": "be3a73f5-c287-4f2b-bbd0-7804ba7e02f3" - }, - "rules": [ - { - "apiGroups": [ - "apiextensions.k8s.io" - ], - "resourceNames": [ - "viziers.px.dev" - ], - "resources": [ - "customresourcedefinitions" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "px.dev" - ], - "resources": [ - "viziers" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"hipster-secret-access\"},\"name\":\"hipster-secret-access\"},\"rules\":[{\"apiGroups\":[\"*\"],\"resources\":[\"secrets\"],\"verbs\":[\"get\",\"list\",\"watch\"]}]}\n" - }, - "creationTimestamp": "2021-07-04T18:22:52Z", - "labels": { - "app": "hipster-secret-access" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-04T18:22:52Z" - } - ], - "name": "hipster-secret-access", - "resourceVersion": "11500881", - "uid": "f8922ad4-c689-449d-a948-d5abaafa1117" - }, - "rules": [ - { - "apiGroups": [ - "*" - ], - "resources": [ - "secrets" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"kubelet-api-admin\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"nodes/proxy\",\"nodes/log\",\"nodes/stats\",\"nodes/metrics\",\"nodes/spec\"],\"verbs\":[\"*\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:30Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:30Z" - } - ], - "name": "kubelet-api-admin", - "resourceVersion": "613", - "uid": "969f4113-8386-4baa-8538-c8289444862d" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes/proxy", - "nodes/log", - "nodes/stats", - "nodes/metrics", - "nodes/spec" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:46:09Z", - "labels": { - "olm.owner": "olm-operators", - "olm.owner.kind": "OperatorGroup", - "olm.owner.namespace": "olm" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:olm.owner": {}, - "f:olm.owner.kind": {}, - "f:olm.owner.namespace": {} - } - } - }, - "manager": "olm", - "operation": "Update", - "time": "2021-08-12T11:46:09Z" - } - ], - "name": "olm-operators-admin", - "resourceVersion": "31981760", - "uid": "fbcf5956-8286-4351-9c93-537ac28ed9bd" - }, - "rules": null - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:46:09Z", - "labels": { - "olm.owner": "olm-operators", - "olm.owner.kind": "OperatorGroup", - "olm.owner.namespace": "olm" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:olm.owner": {}, - "f:olm.owner.kind": {}, - "f:olm.owner.namespace": {} - } - } - }, - "manager": "olm", - "operation": "Update", - "time": "2021-08-12T11:46:09Z" - } - ], - "name": "olm-operators-edit", - "resourceVersion": "31981762", - "uid": "d3570124-0686-4b35-ba93-77907d69edcb" - }, - "rules": null - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:46:09Z", - "labels": { - "olm.owner": "olm-operators", - "olm.owner.kind": "OperatorGroup", - "olm.owner.namespace": "olm" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:olm.owner": {}, - "f:olm.owner.kind": {}, - "f:olm.owner.namespace": {} - } - } - }, - "manager": "olm", - "operation": "Update", - "time": "2021-08-12T11:46:09Z" - } - ], - "name": "olm-operators-view", - "resourceVersion": "31981764", - "uid": "4c321fd2-a92e-4273-97ad-55f052c31517" - }, - "rules": null - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-attacher-role\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"persistentvolumes\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\",\"patch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"nodes\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"storage.k8s.io\"],\"resources\":[\"csinodes\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"storage.k8s.io\"],\"resources\":[\"volumeattachments\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\",\"patch\"]},{\"apiGroups\":[\"storage.k8s.io\"],\"resources\":[\"volumeattachments/status\"],\"verbs\":[\"patch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-attacher-role", - "resourceVersion": "468", - "uid": "61478a13-618e-4496-b146-d421830c2896" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumes" - ], - "verbs": [ - "get", - "list", - "watch", - "update", - "patch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "csinodes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "volumeattachments" - ], - "verbs": [ - "get", - "list", - "watch", - "update", - "patch" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "volumeattachments/status" - ], - "verbs": [ - "patch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-provisioner-role\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"persistentvolumes\"],\"verbs\":[\"get\",\"list\",\"watch\",\"create\",\"delete\"]},{\"apiGroups\":[\"\"],\"resources\":[\"persistentvolumeclaims\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\"]},{\"apiGroups\":[\"storage.k8s.io\"],\"resources\":[\"storageclasses\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"list\",\"watch\",\"create\",\"update\",\"patch\"]},{\"apiGroups\":[\"storage.k8s.io\"],\"resources\":[\"csinodes\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"nodes\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"snapshot.storage.k8s.io\"],\"resources\":[\"volumesnapshots\"],\"verbs\":[\"get\",\"list\"]},{\"apiGroups\":[\"snapshot.storage.k8s.io\"],\"resources\":[\"volumesnapshotcontents\"],\"verbs\":[\"get\",\"list\"]},{\"apiGroups\":[\"storage.k8s.io\"],\"resources\":[\"volumeattachments\"],\"verbs\":[\"get\",\"list\",\"watch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-provisioner-role", - "resourceVersion": "470", - "uid": "4e141227-259f-4e7e-a134-51b8793eecd3" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumes" - ], - "verbs": [ - "get", - "list", - "watch", - "create", - "delete" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims" - ], - "verbs": [ - "get", - "list", - "watch", - "update" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "storageclasses" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "list", - "watch", - "create", - "update", - "patch" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "csinodes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "snapshot.storage.k8s.io" - ], - "resources": [ - "volumesnapshots" - ], - "verbs": [ - "get", - "list" - ] - }, - { - "apiGroups": [ - "snapshot.storage.k8s.io" - ], - "resources": [ - "volumesnapshotcontents" - ], - "verbs": [ - "get", - "list" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "volumeattachments" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-resizer-role\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"persistentvolumes\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\",\"patch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"persistentvolumeclaims\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"persistentvolumeclaims/status\"],\"verbs\":[\"update\",\"patch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"list\",\"watch\",\"create\",\"update\",\"patch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-resizer-role", - "resourceVersion": "471", - "uid": "1ec6ffdd-f0da-458a-8094-2a80b5e08232" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumes" - ], - "verbs": [ - "get", - "list", - "watch", - "update", - "patch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims/status" - ], - "verbs": [ - "update", - "patch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "list", - "watch", - "create", - "update", - "patch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-snapshotter-role\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"list\",\"watch\",\"create\",\"update\",\"patch\"]},{\"apiGroups\":[\"snapshot.storage.k8s.io\"],\"resources\":[\"volumesnapshotclasses\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"snapshot.storage.k8s.io\"],\"resources\":[\"volumesnapshotcontents\"],\"verbs\":[\"create\",\"get\",\"list\",\"watch\",\"update\",\"delete\",\"patch\"]},{\"apiGroups\":[\"snapshot.storage.k8s.io\"],\"resources\":[\"volumesnapshotcontents/status\"],\"verbs\":[\"update\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-snapshotter-role", - "resourceVersion": "472", - "uid": "23f705d1-3e65-47f9-bdb7-35e6f4d573df" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "list", - "watch", - "create", - "update", - "patch" - ] - }, - { - "apiGroups": [ - "snapshot.storage.k8s.io" - ], - "resources": [ - "volumesnapshotclasses" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "snapshot.storage.k8s.io" - ], - "resources": [ - "volumesnapshotcontents" - ], - "verbs": [ - "create", - "get", - "list", - "watch", - "update", - "delete", - "patch" - ] - }, - { - "apiGroups": [ - "snapshot.storage.k8s.io" - ], - "resources": [ - "volumesnapshotcontents/status" - ], - "verbs": [ - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-31T19:48:24Z", - "labels": { - "olm.owner": "pixie-operator.v0.0.7", - "olm.owner.kind": "ClusterServiceVersion", - "olm.owner.namespace": "px-operator", - "operators.coreos.com/pixie-operator.px-operator": "" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:olm.owner": {}, - "f:olm.owner.kind": {}, - "f:olm.owner.namespace": {}, - "f:operators.coreos.com/pixie-operator.px-operator": {} - } - }, - "f:rules": {} - }, - "manager": "olm", - "operation": "Update", - "time": "2021-08-31T19:48:25Z" - } - ], - "name": "pixie-operator.v0.0.7-pixie-operator-service-account-7d476f658d", - "resourceVersion": "41269057", - "uid": "c91d48da-607b-4a8f-acf6-3208f67c75a3" - }, - "rules": [ - { - "apiGroups": [ - "", - "apps", - "rbac.authorization.k8s.io", - "extensions", - "etcd.database.coreos.com", - "batch", - "nats.io", - "policy", - "apiextensions.k8s.io", - "px.dev" - ], - "resources": [ - "clusterroles", - "clusterrolebindings", - "configmaps", - "customresourcedefinitions", - "secrets", - "pods", - "services", - "deployments", - "daemonsets", - "persistentvolumes", - "persistentvolumeclaims", - "roles", - "rolebindings", - "serviceaccounts", - "etcdclusters.etcd.database.coreos.com", - "etcdclusters", - "statefulsets", - "cronjobs", - "jobs", - "natsclusters", - "podsecuritypolicies", - "viziers", - "viziers/status" - ], - "verbs": [ - "*" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "storageclasses" - ], - "verbs": [ - "get", - "list" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "namespaces" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "updateinfo-crd", - "components.gke.io/component-version": "1.1.0", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"updateinfo-crd\",\"components.gke.io/component-version\":\"1.1.0\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"read-updateinfo\"},\"rules\":[{\"apiGroups\":[\"nodemanagement.gke.io\"],\"resources\":[\"updateinfos\"],\"verbs\":[\"get\",\"list\",\"watch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:42Z" - } - ], - "name": "read-updateinfo", - "resourceVersion": "25934521", - "uid": "83e2c41a-10cb-4972-ba29-5e429266d028" - }, - "rules": [ - { - "apiGroups": [ - "nodemanagement.gke.io" - ], - "resources": [ - "updateinfos" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "snapshot-controller", - "components.gke.io/component-version": "0.5.5", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"snapshot-controller\",\"components.gke.io/component-version\":\"0.5.5\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"snapshot-controller-runner\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"persistentvolumes\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"persistentvolumeclaims\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\"]},{\"apiGroups\":[\"storage.k8s.io\"],\"resources\":[\"storageclasses\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"list\",\"watch\",\"create\",\"update\",\"patch\"]},{\"apiGroups\":[\"snapshot.storage.k8s.io\"],\"resources\":[\"volumesnapshotclasses\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"snapshot.storage.k8s.io\"],\"resources\":[\"volumesnapshotcontents\"],\"verbs\":[\"create\",\"get\",\"list\",\"watch\",\"update\",\"delete\"]},{\"apiGroups\":[\"snapshot.storage.k8s.io\"],\"resources\":[\"volumesnapshots\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\"]},{\"apiGroups\":[\"snapshot.storage.k8s.io\"],\"resources\":[\"volumesnapshots/status\"],\"verbs\":[\"update\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/layer": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:42Z" - } - ], - "name": "snapshot-controller-runner", - "resourceVersion": "41911914", - "uid": "b2034bb2-a11f-4cf0-b950-d461bda73ac2" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims" - ], - "verbs": [ - "get", - "list", - "watch", - "update" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "storageclasses" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "list", - "watch", - "create", - "update", - "patch" - ] - }, - { - "apiGroups": [ - "snapshot.storage.k8s.io" - ], - "resources": [ - "volumesnapshotclasses" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "snapshot.storage.k8s.io" - ], - "resources": [ - "volumesnapshotcontents" - ], - "verbs": [ - "create", - "get", - "list", - "watch", - "update", - "delete" - ] - }, - { - "apiGroups": [ - "snapshot.storage.k8s.io" - ], - "resources": [ - "volumesnapshots" - ], - "verbs": [ - "get", - "list", - "watch", - "update" - ] - }, - { - "apiGroups": [ - "snapshot.storage.k8s.io" - ], - "resources": [ - "volumesnapshots/status" - ], - "verbs": [ - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"stackdriver:metadata-agent\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"endpoints\",\"namespaces\",\"nodes\",\"pods\",\"replicationcontrollers\",\"services\"],\"verbs\":[\"watch\",\"get\",\"list\"]},{\"apiGroups\":[\"apps\"],\"resources\":[\"daemonsets\",\"deployments\",\"replicasets\",\"statefulsets\"],\"verbs\":[\"watch\",\"get\",\"list\"]},{\"apiGroups\":[\"batch\"],\"resources\":[\"cronjobs\",\"jobs\"],\"verbs\":[\"watch\",\"get\",\"list\"]},{\"apiGroups\":[\"extensions\"],\"resources\":[\"ingresses\"],\"verbs\":[\"watch\",\"get\",\"list\"]},{\"apiGroups\":[\"apps\",\"extensions\"],\"resources\":[\"deployments\"],\"verbs\":[\"get\",\"update\"]},{\"nonResourceURLs\":[\"/metrics\"],\"verbs\":[\"get\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - } - ], - "name": "stackdriver:metadata-agent", - "resourceVersion": "373", - "uid": "cf9c350a-2866-43d1-9263-5b9d0bf14a0f" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints", - "namespaces", - "nodes", - "pods", - "replicationcontrollers", - "services" - ], - "verbs": [ - "watch", - "get", - "list" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "daemonsets", - "deployments", - "replicasets", - "statefulsets" - ], - "verbs": [ - "watch", - "get", - "list" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "cronjobs", - "jobs" - ], - "verbs": [ - "watch", - "get", - "list" - ] - }, - { - "apiGroups": [ - "extensions" - ], - "resources": [ - "ingresses" - ], - "verbs": [ - "watch", - "get", - "list" - ] - }, - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "deployments" - ], - "verbs": [ - "get", - "update" - ] - }, - { - "nonResourceURLs": [ - "/metrics" - ], - "verbs": [ - "get" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "storageversionmigrator-rbac", - "components.gke.io/component-version": "0.0.3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"storageversionmigrator-rbac\",\"components.gke.io/component-version\":\"0.0.3\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"storage-version-migration-crd-creator\"},\"rules\":[{\"apiGroups\":[\"apiextensions.k8s.io\"],\"resources\":[\"customresourcedefinitions\"],\"verbs\":[\"create\",\"delete\",\"get\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - } - ], - "name": "storage-version-migration-crd-creator", - "resourceVersion": "556", - "uid": "ae3208a2-88ea-4a33-8fb1-14d056344b68" - }, - "rules": [ - { - "apiGroups": [ - "apiextensions.k8s.io" - ], - "resources": [ - "customresourcedefinitions" - ], - "verbs": [ - "create", - "delete", - "get" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "storageversionmigrator-rbac", - "components.gke.io/component-version": "0.0.3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"storageversionmigrator-rbac\",\"components.gke.io/component-version\":\"0.0.3\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"storage-version-migration-initializer\"},\"rules\":[{\"apiGroups\":[\"migration.k8s.io\"],\"resources\":[\"storageversionmigrations\"],\"verbs\":[\"create\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - } - ], - "name": "storage-version-migration-initializer", - "resourceVersion": "557", - "uid": "890dd546-2e67-455c-a9f3-2c6fac8395de" - }, - "rules": [ - { - "apiGroups": [ - "migration.k8s.io" - ], - "resources": [ - "storageversionmigrations" - ], - "verbs": [ - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "storageversionmigrator-rbac", - "components.gke.io/component-version": "0.0.3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"storageversionmigrator-rbac\",\"components.gke.io/component-version\":\"0.0.3\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"storage-version-migration-trigger\"},\"rules\":[{\"apiGroups\":[\"migration.k8s.io\"],\"resources\":[\"storagestates\"],\"verbs\":[\"watch\",\"get\",\"list\",\"delete\",\"create\",\"update\"]},{\"apiGroups\":[\"migration.k8s.io\"],\"resources\":[\"storageversionmigrations\"],\"verbs\":[\"watch\",\"get\",\"list\",\"delete\",\"create\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - } - ], - "name": "storage-version-migration-trigger", - "resourceVersion": "551", - "uid": "39d36bae-f488-4b1e-b044-08b5c83f74f9" - }, - "rules": [ - { - "apiGroups": [ - "migration.k8s.io" - ], - "resources": [ - "storagestates" - ], - "verbs": [ - "watch", - "get", - "list", - "delete", - "create", - "update" - ] - }, - { - "apiGroups": [ - "migration.k8s.io" - ], - "resources": [ - "storageversionmigrations" - ], - "verbs": [ - "watch", - "get", - "list", - "delete", - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults", - "rbac.authorization.k8s.io/aggregate-to-admin": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {}, - "f:rbac.authorization.k8s.io/aggregate-to-admin": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:aggregate-to-admin", - "resourceVersion": "49", - "uid": "169ed642-018e-4389-be66-9918b47e0d7c" - }, - "rules": [ - { - "apiGroups": [ - "authorization.k8s.io" - ], - "resources": [ - "localsubjectaccessreviews" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "rbac.authorization.k8s.io" - ], - "resources": [ - "rolebindings", - "roles" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "get", - "list", - "patch", - "update", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults", - "rbac.authorization.k8s.io/aggregate-to-edit": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {}, - "f:rbac.authorization.k8s.io/aggregate-to-edit": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:aggregate-to-edit", - "resourceVersion": "50", - "uid": "a0e4aedb-b681-4803-aac8-6bf5d33bc2c1" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "pods/attach", - "pods/exec", - "pods/portforward", - "pods/proxy", - "secrets", - "services/proxy" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "serviceaccounts" - ], - "verbs": [ - "impersonate" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods", - "pods/attach", - "pods/exec", - "pods/portforward", - "pods/proxy" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps", - "endpoints", - "persistentvolumeclaims", - "replicationcontrollers", - "replicationcontrollers/scale", - "secrets", - "serviceaccounts", - "services", - "services/proxy" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "daemonsets", - "deployments", - "deployments/rollback", - "deployments/scale", - "replicasets", - "replicasets/scale", - "statefulsets", - "statefulsets/scale" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "autoscaling" - ], - "resources": [ - "horizontalpodautoscalers" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "cronjobs", - "jobs" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "extensions" - ], - "resources": [ - "daemonsets", - "deployments", - "deployments/rollback", - "deployments/scale", - "ingresses", - "networkpolicies", - "replicasets", - "replicasets/scale", - "replicationcontrollers/scale" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "policy" - ], - "resources": [ - "poddisruptionbudgets" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "networking.k8s.io" - ], - "resources": [ - "ingresses", - "networkpolicies" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults", - "rbac.authorization.k8s.io/aggregate-to-view": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {}, - "f:rbac.authorization.k8s.io/aggregate-to-view": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:aggregate-to-view", - "resourceVersion": "51", - "uid": "0dfce890-f1b2-47f5-a5d8-629146f434c8" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps", - "endpoints", - "persistentvolumeclaims", - "persistentvolumeclaims/status", - "pods", - "replicationcontrollers", - "replicationcontrollers/scale", - "serviceaccounts", - "services", - "services/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "bindings", - "events", - "limitranges", - "namespaces/status", - "pods/log", - "pods/status", - "replicationcontrollers/status", - "resourcequotas", - "resourcequotas/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "namespaces" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "controllerrevisions", - "daemonsets", - "daemonsets/status", - "deployments", - "deployments/scale", - "deployments/status", - "replicasets", - "replicasets/scale", - "replicasets/status", - "statefulsets", - "statefulsets/scale", - "statefulsets/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "autoscaling" - ], - "resources": [ - "horizontalpodautoscalers", - "horizontalpodautoscalers/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "cronjobs", - "cronjobs/status", - "jobs", - "jobs/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "extensions" - ], - "resources": [ - "daemonsets", - "daemonsets/status", - "deployments", - "deployments/scale", - "deployments/status", - "ingresses", - "ingresses/status", - "networkpolicies", - "replicasets", - "replicasets/scale", - "replicasets/status", - "replicationcontrollers/scale" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "policy" - ], - "resources": [ - "poddisruptionbudgets", - "poddisruptionbudgets/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "networking.k8s.io" - ], - "resources": [ - "ingresses", - "ingresses/status", - "networkpolicies" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:auth-delegator", - "resourceVersion": "57", - "uid": "4ad7bb40-6cc4-4de7-9f10-456ba732ebc5" - }, - "rules": [ - { - "apiGroups": [ - "authentication.k8s.io" - ], - "resources": [ - "tokenreviews" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "authorization.k8s.io" - ], - "resources": [ - "subjectaccessreviews" - ], - "verbs": [ - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:basic-user", - "resourceVersion": "44", - "uid": "9fe3f9ff-35ed-463c-84c8-67f2a9222da1" - }, - "rules": [ - { - "apiGroups": [ - "authorization.k8s.io" - ], - "resources": [ - "selfsubjectaccessreviews", - "selfsubjectrulesreviews" - ], - "verbs": [ - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:certificates.k8s.io:certificatesigningrequests:nodeclient", - "resourceVersion": "62", - "uid": "47539291-53a5-4529-b90a-0015cdfa7624" - }, - "rules": [ - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resources": [ - "certificatesigningrequests/nodeclient" - ], - "verbs": [ - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:certificates.k8s.io:certificatesigningrequests:selfnodeclient", - "resourceVersion": "63", - "uid": "c8fd5608-5ae9-48af-81f2-533b4cbd65ad" - }, - "rules": [ - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resources": [ - "certificatesigningrequests/selfnodeclient" - ], - "verbs": [ - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:certificates.k8s.io:kube-apiserver-client-approver", - "resourceVersion": "67", - "uid": "b0e1c915-747c-4503-80e7-bc16efc7e678" - }, - "rules": [ - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resourceNames": [ - "kubernetes.io/kube-apiserver-client" - ], - "resources": [ - "signers" - ], - "verbs": [ - "approve" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:certificates.k8s.io:kube-apiserver-client-kubelet-approver", - "resourceVersion": "68", - "uid": "d6d6f17f-83f3-40fb-8c97-55da89d300ba" - }, - "rules": [ - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resourceNames": [ - "kubernetes.io/kube-apiserver-client-kubelet" - ], - "resources": [ - "signers" - ], - "verbs": [ - "approve" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:certificates.k8s.io:kubelet-serving-approver", - "resourceVersion": "66", - "uid": "fd066614-6a60-4d30-978b-971aa86a6533" - }, - "rules": [ - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resourceNames": [ - "kubernetes.io/kubelet-serving" - ], - "resources": [ - "signers" - ], - "verbs": [ - "approve" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:certificates.k8s.io:legacy-unknown-approver", - "resourceVersion": "65", - "uid": "6d850555-ec42-4322-bdfe-f8cac77ab75c" - }, - "rules": [ - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resourceNames": [ - "kubernetes.io/legacy-unknown" - ], - "resources": [ - "signers" - ], - "verbs": [ - "approve" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "clustermetrics-rbac", - "components.gke.io/component-version": "1.4.0", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"clustermetrics-rbac\",\"components.gke.io/component-version\":\"1.4.0\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:clustermetrics\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"componentstatuses\",\"namespaces\",\"nodes\",\"pods\",\"resourcequotas\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\",\"events\"],\"verbs\":[\"create\",\"get\",\"update\"]},{\"apiGroups\":[\"admissionregistration.k8s.io\"],\"resources\":[\"mutatingwebhookconfigurations\"],\"verbs\":[\"list\",\"watch\"]},{\"apiGroups\":[\"apps\"],\"resources\":[\"deployments\",\"replicasets\",\"statefulsets\",\"daemonsets\"],\"verbs\":[\"list\",\"watch\"]},{\"apiGroups\":[\"batch\"],\"resources\":[\"jobs\"],\"verbs\":[\"list\",\"watch\"]},{\"apiGroups\":[\"policy\"],\"resources\":[\"poddisruptionbudgets\"],\"verbs\":[\"list\",\"watch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - } - ], - "name": "system:clustermetrics", - "resourceVersion": "427", - "uid": "0d904ac3-ce06-431d-aec8-3b0a9616557e" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "componentstatuses", - "namespaces", - "nodes", - "pods", - "resourcequotas" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps", - "events" - ], - "verbs": [ - "create", - "get", - "update" - ] - }, - { - "apiGroups": [ - "admissionregistration.k8s.io" - ], - "resources": [ - "mutatingwebhookconfigurations" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "deployments", - "replicasets", - "statefulsets", - "daemonsets" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "jobs" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "policy" - ], - "resources": [ - "poddisruptionbudgets" - ], - "verbs": [ - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:attachdetach-controller", - "resourceVersion": "71", - "uid": "7575d209-e789-4fbf-9ea3-81425ccda5a7" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims", - "persistentvolumes" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes/status" - ], - "verbs": [ - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "volumeattachments" - ], - "verbs": [ - "create", - "delete", - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "csidrivers" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "csinodes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:certificate-controller", - "resourceVersion": "96", - "uid": "f58f190b-1293-4e46-a5b1-57a1b449dd47" - }, - "rules": [ - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resources": [ - "certificatesigningrequests" - ], - "verbs": [ - "delete", - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resources": [ - "certificatesigningrequests/approval", - "certificatesigningrequests/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resourceNames": [ - "kubernetes.io/kube-apiserver-client-kubelet" - ], - "resources": [ - "signers" - ], - "verbs": [ - "approve" - ] - }, - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resourceNames": [ - "kubernetes.io/kube-apiserver-client", - "kubernetes.io/kube-apiserver-client-kubelet", - "kubernetes.io/kubelet-serving", - "kubernetes.io/legacy-unknown" - ], - "resources": [ - "signers" - ], - "verbs": [ - "sign" - ] - }, - { - "apiGroups": [ - "authorization.k8s.io" - ], - "resources": [ - "subjectaccessreviews" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:clusterrole-aggregation-controller", - "resourceVersion": "72", - "uid": "a6b291ad-102f-4399-a5aa-e0b3dfa3f7b1" - }, - "rules": [ - { - "apiGroups": [ - "rbac.authorization.k8s.io" - ], - "resources": [ - "clusterroles" - ], - "verbs": [ - "escalate", - "get", - "list", - "patch", - "update", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:cronjob-controller", - "resourceVersion": "73", - "uid": "86547cb3-b7f3-4220-af09-a43ec6edafaf" - }, - "rules": [ - { - "apiGroups": [ - "batch" - ], - "resources": [ - "cronjobs" - ], - "verbs": [ - "get", - "list", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "jobs" - ], - "verbs": [ - "create", - "delete", - "get", - "list", - "patch", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "cronjobs/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "cronjobs/finalizers" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "delete", - "list" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:daemon-set-controller", - "resourceVersion": "74", - "uid": "2ea5db01-f697-4eb1-b602-0840b3416993" - }, - "rules": [ - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "daemonsets" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "daemonsets/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "daemonsets/finalizers" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "create", - "delete", - "list", - "patch", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods/binding" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "controllerrevisions" - ], - "verbs": [ - "create", - "delete", - "get", - "list", - "patch", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:deployment-controller", - "resourceVersion": "75", - "uid": "78160b29-c586-4742-8bdd-fe0bd8a6e6c3" - }, - "rules": [ - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "deployments" - ], - "verbs": [ - "get", - "list", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "deployments/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "deployments/finalizers" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "replicasets" - ], - "verbs": [ - "create", - "delete", - "get", - "list", - "patch", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "get", - "list", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:disruption-controller", - "resourceVersion": "76", - "uid": "f6f2f2bf-4c39-4999-a143-591790249c4d" - }, - "rules": [ - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "deployments" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "replicasets" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "replicationcontrollers" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "policy" - ], - "resources": [ - "poddisruptionbudgets" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "statefulsets" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "policy" - ], - "resources": [ - "poddisruptionbudgets/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "*" - ], - "resources": [ - "*/scale" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:endpoint-controller", - "resourceVersion": "77", - "uid": "937ceca8-241f-428e-a36b-b6ec70e73595" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "pods", - "services" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints" - ], - "verbs": [ - "create", - "delete", - "get", - "list", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints/restricted" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:endpointslice-controller", - "resourceVersion": "78", - "uid": "580d7354-48b5-4f84-a6cb-7ce688c638fb" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes", - "pods", - "services" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "services/finalizers" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "discovery.k8s.io" - ], - "resources": [ - "endpointslices" - ], - "verbs": [ - "create", - "delete", - "get", - "list", - "update" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:endpointslicemirroring-controller", - "resourceVersion": "79", - "uid": "467b8703-d272-4632-953c-ee58a307a188" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints", - "services" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "services/finalizers" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints/finalizers" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "discovery.k8s.io" - ], - "resources": [ - "endpointslices" - ], - "verbs": [ - "create", - "delete", - "get", - "list", - "update" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:expand-controller", - "resourceVersion": "80", - "uid": "0676f02d-9955-4ef6-8c44-a36d950ce6ef" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumes" - ], - "verbs": [ - "get", - "list", - "patch", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims/status" - ], - "verbs": [ - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "storageclasses" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints", - "services" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "secrets" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:generic-garbage-collector", - "resourceVersion": "81", - "uid": "b51b85f6-5278-4e9a-854f-6543afc43c74" - }, - "rules": [ - { - "apiGroups": [ - "*" - ], - "resources": [ - "*" - ], - "verbs": [ - "delete", - "get", - "list", - "patch", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:controller:glbc\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"secrets\"],\"verbs\":[\"get\"]},{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\",\"create\",\"patch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"endpoints\",\"services\",\"pods\",\"nodes\",\"namespaces\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"services\"],\"verbs\":[\"update\",\"patch\"]},{\"apiGroups\":[\"extensions\",\"networking.k8s.io\"],\"resources\":[\"ingresses\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"extensions\",\"networking.k8s.io\"],\"resources\":[\"ingresses\"],\"verbs\":[\"update\"]},{\"apiGroups\":[\"extensions\",\"networking.k8s.io\"],\"resources\":[\"ingresses/status\"],\"verbs\":[\"update\",\"patch\"]},{\"apiGroups\":[\"apiextensions.k8s.io\"],\"resources\":[\"customresourcedefinitions\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\",\"create\",\"patch\"]},{\"apiGroups\":[\"cloud.google.com\"],\"resources\":[\"backendconfigs\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\",\"create\",\"patch\"]},{\"apiGroups\":[\"networking.gke.io\"],\"resources\":[\"servicenetworkendpointgroups\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\",\"create\",\"patch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:30Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:30Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:44Z" - } - ], - "name": "system:controller:glbc", - "resourceVersion": "25934535", - "uid": "c8b6cbc3-da27-4484-8851-f23e15d7650b" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "secrets" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "get", - "list", - "watch", - "update", - "create", - "patch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints", - "services", - "pods", - "nodes", - "namespaces" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "services" - ], - "verbs": [ - "update", - "patch" - ] - }, - { - "apiGroups": [ - "extensions", - "networking.k8s.io" - ], - "resources": [ - "ingresses" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "extensions", - "networking.k8s.io" - ], - "resources": [ - "ingresses" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "extensions", - "networking.k8s.io" - ], - "resources": [ - "ingresses/status" - ], - "verbs": [ - "update", - "patch" - ] - }, - { - "apiGroups": [ - "apiextensions.k8s.io" - ], - "resources": [ - "customresourcedefinitions" - ], - "verbs": [ - "get", - "list", - "watch", - "update", - "create", - "patch" - ] - }, - { - "apiGroups": [ - "cloud.google.com" - ], - "resources": [ - "backendconfigs" - ], - "verbs": [ - "get", - "list", - "watch", - "update", - "create", - "patch" - ] - }, - { - "apiGroups": [ - "networking.gke.io" - ], - "resources": [ - "servicenetworkendpointgroups" - ], - "verbs": [ - "get", - "list", - "watch", - "update", - "create", - "patch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:horizontal-pod-autoscaler", - "resourceVersion": "82", - "uid": "c76bd102-86b5-48c2-b429-c2e9e57b7d3d" - }, - "rules": [ - { - "apiGroups": [ - "autoscaling" - ], - "resources": [ - "horizontalpodautoscalers" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "autoscaling" - ], - "resources": [ - "horizontalpodautoscalers/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "*" - ], - "resources": [ - "*/scale" - ], - "verbs": [ - "get", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "list" - ] - }, - { - "apiGroups": [ - "" - ], - "resourceNames": [ - "http:heapster:", - "https:heapster:" - ], - "resources": [ - "services/proxy" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "metrics.k8s.io" - ], - "resources": [ - "pods" - ], - "verbs": [ - "list" - ] - }, - { - "apiGroups": [ - "custom.metrics.k8s.io" - ], - "resources": [ - "*" - ], - "verbs": [ - "get", - "list" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:job-controller", - "resourceVersion": "83", - "uid": "ce553aff-8a69-4027-8f08-6fef21224438" - }, - "rules": [ - { - "apiGroups": [ - "batch" - ], - "resources": [ - "jobs" - ], - "verbs": [ - "get", - "list", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "jobs/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "jobs/finalizers" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "create", - "delete", - "list", - "patch", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:namespace-controller", - "resourceVersion": "84", - "uid": "05a00528-e192-4d28-9c1f-09f0800af07c" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "namespaces" - ], - "verbs": [ - "delete", - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "namespaces/finalize", - "namespaces/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "*" - ], - "resources": [ - "*" - ], - "verbs": [ - "delete", - "deletecollection", - "get", - "list" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:node-controller", - "resourceVersion": "85", - "uid": "4dacbe78-5da1-4149-8dfb-762b001586ac" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "delete", - "get", - "list", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes/status" - ], - "verbs": [ - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "delete", - "list" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:45:58Z", - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:rules": {} - }, - "manager": "px", - "operation": "Update", - "time": "2021-08-12T11:45:58Z" - } - ], - "name": "system:controller:operator-lifecycle-manager", - "resourceVersion": "31981650", - "uid": "d453b876-674d-4aeb-a6d6-bf405e034eb1" - }, - "rules": [ - { - "apiGroups": [ - "*" - ], - "resources": [ - "*" - ], - "verbs": [ - "*" - ] - }, - { - "nonResourceURLs": [ - "*" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:persistent-volume-binder", - "resourceVersion": "86", - "uid": "d1d622e5-9996-4329-bbb2-11151d62a117" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumes" - ], - "verbs": [ - "create", - "delete", - "get", - "list", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumes/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims" - ], - "verbs": [ - "get", - "list", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "create", - "delete", - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "storageclasses" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints" - ], - "verbs": [ - "create", - "delete", - "get", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "services" - ], - "verbs": [ - "create", - "delete", - "get" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "secrets" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "get", - "list" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:pod-garbage-collector", - "resourceVersion": "87", - "uid": "d6d925a4-8080-459d-a7b2-91c72c84a444" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "delete", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "get", - "list" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:pv-protection-controller", - "resourceVersion": "98", - "uid": "93c92f57-e230-4bbe-8204-93f180a3015a" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumes" - ], - "verbs": [ - "get", - "list", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:pvc-protection-controller", - "resourceVersion": "97", - "uid": "5da62629-69a3-4a19-8eab-eaea3d976cd1" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims" - ], - "verbs": [ - "get", - "list", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:replicaset-controller", - "resourceVersion": "88", - "uid": "5ce13afb-4379-4af9-8bb6-108cd96b12f0" - }, - "rules": [ - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "replicasets" - ], - "verbs": [ - "get", - "list", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "replicasets/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "replicasets/finalizers" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "create", - "delete", - "list", - "patch", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:replication-controller", - "resourceVersion": "89", - "uid": "cf9d79e4-9c98-4cd9-8648-784ea3cf30c2" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "replicationcontrollers" - ], - "verbs": [ - "get", - "list", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "replicationcontrollers/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "replicationcontrollers/finalizers" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "create", - "delete", - "list", - "patch", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:resourcequota-controller", - "resourceVersion": "90", - "uid": "c3ea02a8-a072-4306-af2a-d23335ae063b" - }, - "rules": [ - { - "apiGroups": [ - "*" - ], - "resources": [ - "*" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "resourcequotas/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:root-ca-cert-publisher", - "resourceVersion": "99", - "uid": "83757e72-f917-4d3f-9c83-7a16c77fff09" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "create", - "update" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:route-controller", - "resourceVersion": "91", - "uid": "4858d998-e7cf-43ee-931d-e927c6c27ba0" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes/status" - ], - "verbs": [ - "patch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:service-account-controller", - "resourceVersion": "92", - "uid": "a8d35400-a4b1-4d02-bf6e-c51ae75a4fe0" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "serviceaccounts" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:service-controller", - "resourceVersion": "93", - "uid": "f865dc76-7e7c-4ef9-9e6d-eec1bde24bf6" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "services" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "services/status" - ], - "verbs": [ - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:statefulset-controller", - "resourceVersion": "94", - "uid": "946fa715-e2e9-41a1-8d3b-afa5905a634b" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "statefulsets" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "statefulsets/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "statefulsets/finalizers" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "create", - "delete", - "get", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "controllerrevisions" - ], - "verbs": [ - "create", - "delete", - "get", - "list", - "patch", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims" - ], - "verbs": [ - "create", - "get" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:ttl-controller", - "resourceVersion": "95", - "uid": "2a56250f-a9f4-4ba8-a98d-664a0241fb99" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "list", - "patch", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:discovery", - "resourceVersion": "43", - "uid": "2861547b-045a-4d68-bf54-aa0797878def" - }, - "rules": [ - { - "nonResourceURLs": [ - "/api", - "/api/*", - "/apis", - "/apis/*", - "/healthz", - "/livez", - "/openapi", - "/openapi/*", - "/readyz", - "/version", - "/version/" - ], - "verbs": [ - "get" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "gcp-controller-manager-combined", - "components.gke.io/component-version": "2.1.10", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"gcp-controller-manager-combined\",\"components.gke.io/component-version\":\"2.1.10\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gcp-controller-manager\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"serviceaccounts\",\"pods\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"nodes\",\"endpoints\",\"configmaps\"],\"verbs\":[\"*\"]},{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"create\"]},{\"apiGroups\":[\"certificates.k8s.io\"],\"resources\":[\"certificatesigningrequests\",\"certificatesigningrequests/approval\",\"certificatesigningrequests/status\"],\"verbs\":[\"*\"]},{\"apiGroups\":[\"certificates.k8s.io\"],\"resourceNames\":[\"kubernetes.io/kube-apiserver-client\",\"kubernetes.io/kube-apiserver-client-kubelet\",\"kubernetes.io/kubelet-serving\",\"kubernetes.io/legacy-unknown\"],\"resources\":[\"signers\"],\"verbs\":[\"approve\",\"sign\"]},{\"apiGroups\":[\"authorization.k8s.io\"],\"resources\":[\"subjectaccessreviews\"],\"verbs\":[\"create\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/layer": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "system:gcp-controller-manager", - "resourceVersion": "41911909", - "uid": "6ef77c4a-e28e-49da-a781-ce989095c3ec" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "serviceaccounts", - "pods" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes", - "endpoints", - "configmaps" - ], - "verbs": [ - "*" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resources": [ - "certificatesigningrequests", - "certificatesigningrequests/approval", - "certificatesigningrequests/status" - ], - "verbs": [ - "*" - ] - }, - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resourceNames": [ - "kubernetes.io/kube-apiserver-client", - "kubernetes.io/kube-apiserver-client-kubelet", - "kubernetes.io/kubelet-serving", - "kubernetes.io/legacy-unknown" - ], - "resources": [ - "signers" - ], - "verbs": [ - "approve", - "sign" - ] - }, - { - "apiGroups": [ - "authorization.k8s.io" - ], - "resources": [ - "subjectaccessreviews" - ], - "verbs": [ - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "gke-common-webhooks-rbac", - "components.gke.io/component-version": "1.1.2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"gke-common-webhooks-rbac\",\"components.gke.io/component-version\":\"1.1.2\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-common-webhooks\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"pods\",\"nodes\",\"configmaps\",\"services\",\"ingress\",\"endpoint\"],\"verbs\":[\"*\"]},{\"apiGroups\":[\"admissionregistration.k8s.io\"],\"resources\":[\"mutatingwebhookconfigurations\",\"validatingwebhookconfigurations\"],\"verbs\":[\"*\"]},{\"apiGroups\":[\"flowcontrol.apiserver.k8s.io\"],\"resources\":[\"prioritylevelconfigurations\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"create\"]},{\"apiGroups\":[\"auto.gke.io\"],\"resources\":[\"allowlistedworkloads\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"apiextensions.k8s.io\"],\"resources\":[\"customresourcedefinitions\"],\"verbs\":[\"delete\"]},{\"apiGroups\":[\"templates.gatekeeper.sh\"],\"resources\":[\"constrainttemplates\"],\"verbs\":[\"delete\"]},{\"apiGroups\":[\"\"],\"resources\":[\"namespaces\"],\"verbs\":[\"list\",\"get\",\"watch\",\"update\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "system:gke-common-webhooks", - "resourceVersion": "46217990", - "uid": "cb2dbdf0-6f30-4cbf-bcbb-d994db12d957" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "pods", - "nodes", - "configmaps", - "services", - "ingress", - "endpoint" - ], - "verbs": [ - "*" - ] - }, - { - "apiGroups": [ - "admissionregistration.k8s.io" - ], - "resources": [ - "mutatingwebhookconfigurations", - "validatingwebhookconfigurations" - ], - "verbs": [ - "*" - ] - }, - { - "apiGroups": [ - "flowcontrol.apiserver.k8s.io" - ], - "resources": [ - "prioritylevelconfigurations" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "auto.gke.io" - ], - "resources": [ - "allowlistedworkloads" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apiextensions.k8s.io" - ], - "resources": [ - "customresourcedefinitions" - ], - "verbs": [ - "delete" - ] - }, - { - "apiGroups": [ - "templates.gatekeeper.sh" - ], - "resources": [ - "constrainttemplates" - ], - "verbs": [ - "delete" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "namespaces" - ], - "verbs": [ - "list", - "get", - "watch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-controller\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"endpoints\"],\"verbs\":[\"create\"]},{\"apiGroups\":[\"\"],\"resourceNames\":[\"vpa-recommender\"],\"resources\":[\"endpoints\"],\"verbs\":[\"get\",\"update\",\"patch\",\"delete\"]},{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\",\"events\"],\"verbs\":[\"get\",\"list\",\"watch\",\"create\",\"update\",\"patch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - } - ], - "name": "system:gke-controller", - "resourceVersion": "568", - "uid": "52b5cbd9-0c70-4d5a-b4f1-f5e55f3e5fd7" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "" - ], - "resourceNames": [ - "vpa-recommender" - ], - "resources": [ - "endpoints" - ], - "verbs": [ - "get", - "update", - "patch", - "delete" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps", - "events" - ], - "verbs": [ - "get", - "list", - "watch", - "create", - "update", - "patch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-hpa-actor\"},\"rules\":[{\"apiGroups\":[\"autoscaling\"],\"resources\":[\"horizontalpodautoscalers\"],\"verbs\":[\"list\",\"get\",\"watch\"]},{\"apiGroups\":[\"autoscaling\"],\"resources\":[\"horizontalpodautoscalers/status\"],\"verbs\":[\"update\"]},{\"apiGroups\":[\"*\"],\"resources\":[\"*/scale\"],\"verbs\":[\"get\",\"update\"]},{\"apiGroups\":[\"metrics.k8s.io\",\"v1\",\"\"],\"resources\":[\"pods\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"custom.metrics.k8s.io\"],\"resources\":[\"*\"],\"verbs\":[\"list\",\"get\",\"watch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - } - ], - "name": "system:gke-hpa-actor", - "resourceVersion": "571", - "uid": "ae2d0c9a-e463-44d2-b744-a666b8228b67" - }, - "rules": [ - { - "apiGroups": [ - "autoscaling" - ], - "resources": [ - "horizontalpodautoscalers" - ], - "verbs": [ - "list", - "get", - "watch" - ] - }, - { - "apiGroups": [ - "autoscaling" - ], - "resources": [ - "horizontalpodautoscalers/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "*" - ], - "resources": [ - "*/scale" - ], - "verbs": [ - "get", - "update" - ] - }, - { - "apiGroups": [ - "metrics.k8s.io", - "v1", - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "custom.metrics.k8s.io" - ], - "resources": [ - "*" - ], - "verbs": [ - "list", - "get", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-hpa-service-reader\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"services\"],\"verbs\":[\"get\",\"list\",\"watch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "system:gke-hpa-service-reader", - "resourceVersion": "577", - "uid": "a708b7e6-c69e-4a5a-b6a4-e9d6fe3693bd" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "services" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "gke-master-healthcheck-rbac", - "components.gke.io/component-version": "1.0.2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"gke-master-healthcheck-rbac\",\"components.gke.io/component-version\":\"1.0.2\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-master-healthcheck\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"componentstatuses\"],\"verbs\":[\"get\",\"watch\",\"list\"]},{\"nonResourceURLs\":[\"/readyz\"],\"verbs\":[\"get\"]}]}\n" - }, - "creationTimestamp": "2021-07-30T14:54:41Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "system:gke-master-healthcheck", - "resourceVersion": "25934490", - "uid": "9ec32c7b-bcbb-4b76-9ed0-46374bd73dd3" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "componentstatuses" - ], - "verbs": [ - "get", - "watch", - "list" - ] - }, - { - "nonResourceURLs": [ - "/readyz" - ], - "verbs": [ - "get" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-version": "resourcequota-rbac-1.0.1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-version\":\"resourcequota-rbac-1.0.1\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-master-resourcequota\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"namespaces\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"resourcequotas\"],\"verbs\":[\"*\"]},{\"apiGroups\":[\"apiextensions.k8s.io\"],\"resources\":[\"customresourcedefinitions\"],\"verbs\":[\"*\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "system:gke-master-resourcequota", - "resourceVersion": "489", - "uid": "a8daea2f-3e4d-49e6-b7d0-22bb00b52e52" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "namespaces" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "resourcequotas" - ], - "verbs": [ - "*" - ] - }, - { - "apiGroups": [ - "apiextensions.k8s.io" - ], - "resources": [ - "customresourcedefinitions" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-uas-collection-reader\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"replicationcontrollers\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"apps\"],\"resources\":[\"daemonsets\",\"deployments\",\"replicasets\",\"statefulsets\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"batch\"],\"resources\":[\"jobs\",\"cronjobs\"],\"verbs\":[\"get\",\"list\",\"watch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "system:gke-uas-collection-reader", - "resourceVersion": "580", - "uid": "86e27972-2e2b-433a-a802-892a20556b87" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "replicationcontrollers" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "daemonsets", - "deployments", - "replicasets", - "statefulsets" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "jobs", - "cronjobs" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-uas-metrics-reader\"},\"rules\":[{\"apiGroups\":[\"metrics.k8s.io\"],\"resources\":[\"pods\"],\"verbs\":[\"get\",\"list\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "system:gke-uas-metrics-reader", - "resourceVersion": "579", - "uid": "236300be-32eb-48aa-ab1b-9ea1f0d12671" - }, - "rules": [ - { - "apiGroups": [ - "metrics.k8s.io" - ], - "resources": [ - "pods" - ], - "verbs": [ - "get", - "list" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "l7-lb-controller-rbac", - "components.gke.io/component-version": "1.0.9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"l7-lb-controller-rbac\",\"components.gke.io/component-version\":\"1.0.9\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:glbc-status\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"pods/status\",\"services/status\",\"services\"],\"verbs\":[\"*\"]},{\"apiGroups\":[\"\"],\"resources\":[\"secrets\"],\"verbs\":[\"get\"]},{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\",\"create\",\"patch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"nodes\",\"namespaces\",\"endpoints\",\"pods\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"networking.gke.io\"],\"resources\":[\"managedcertificates\",\"frontendconfigs\",\"servicenetworkendpointgroups\",\"gcpingressparams\"],\"verbs\":[\"*\"]},{\"apiGroups\":[\"networking.k8s.io\"],\"resources\":[\"ingresses/status\",\"ingressclasses\",\"ingresses\"],\"verbs\":[\"*\"]},{\"apiGroups\":[\"\",\"extensions\"],\"resources\":[\"configmaps\",\"endpoints\",\"events\",\"ingresses\",\"ingresses/status\"],\"verbs\":[\"*\"]},{\"apiGroups\":[\"apiextensions.k8s.io\"],\"resources\":[\"customresourcedefinitions\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\",\"create\",\"patch\"]},{\"apiGroups\":[\"cloud.google.com\"],\"resources\":[\"backendconfigs\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\",\"create\",\"patch\"]},{\"apiGroups\":[\"networking.istio.io\"],\"resources\":[\"destinationrules\"],\"verbs\":[\"*\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "system:glbc-status", - "resourceVersion": "25934492", - "uid": "0f89f5f7-7245-4626-91d9-f30d218ae487" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "pods/status", - "services/status", - "services" - ], - "verbs": [ - "*" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "secrets" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "get", - "list", - "watch", - "update", - "create", - "patch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes", - "namespaces", - "endpoints", - "pods" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "networking.gke.io" - ], - "resources": [ - "managedcertificates", - "frontendconfigs", - "servicenetworkendpointgroups", - "gcpingressparams" - ], - "verbs": [ - "*" - ] - }, - { - "apiGroups": [ - "networking.k8s.io" - ], - "resources": [ - "ingresses/status", - "ingressclasses", - "ingresses" - ], - "verbs": [ - "*" - ] - }, - { - "apiGroups": [ - "", - "extensions" - ], - "resources": [ - "configmaps", - "endpoints", - "events", - "ingresses", - "ingresses/status" - ], - "verbs": [ - "*" - ] - }, - { - "apiGroups": [ - "apiextensions.k8s.io" - ], - "resources": [ - "customresourcedefinitions" - ], - "verbs": [ - "get", - "list", - "watch", - "update", - "create", - "patch" - ] - }, - { - "apiGroups": [ - "cloud.google.com" - ], - "resources": [ - "backendconfigs" - ], - "verbs": [ - "get", - "list", - "watch", - "update", - "create", - "patch" - ] - }, - { - "apiGroups": [ - "networking.istio.io" - ], - "resources": [ - "destinationrules" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:heapster", - "resourceVersion": "52", - "uid": "c372a148-87c3-4369-bf79-8136907cb4d6" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "events", - "namespaces", - "nodes", - "pods" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "extensions" - ], - "resources": [ - "deployments" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:kube-aggregator", - "resourceVersion": "58", - "uid": "be030e06-d28c-42b2-b12a-9d17c3815ace" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints", - "services" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:kube-controller-manager", - "resourceVersion": "59", - "uid": "a0c6d646-195d-4e7c-9248-5401eb58fe92" - }, - "rules": [ - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "coordination.k8s.io" - ], - "resources": [ - "leases" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "coordination.k8s.io" - ], - "resourceNames": [ - "kube-controller-manager" - ], - "resources": [ - "leases" - ], - "verbs": [ - "get", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "" - ], - "resourceNames": [ - "kube-controller-manager" - ], - "resources": [ - "endpoints" - ], - "verbs": [ - "get", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "secrets", - "serviceaccounts" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "secrets" - ], - "verbs": [ - "delete" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps", - "namespaces", - "secrets", - "serviceaccounts" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "secrets", - "serviceaccounts" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "authentication.k8s.io" - ], - "resources": [ - "tokenreviews" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "authorization.k8s.io" - ], - "resources": [ - "subjectaccessreviews" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "*" - ], - "resources": [ - "*" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "serviceaccounts/token" - ], - "verbs": [ - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:kube-dns", - "resourceVersion": "60", - "uid": "fd57534c-4600-46b1-a43f-49acf290e0c8" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints", - "services" - ], - "verbs": [ - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:kube-dns-autoscaler\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"nodes\"],\"verbs\":[\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"replicationcontrollers/scale\"],\"verbs\":[\"get\",\"update\"]},{\"apiGroups\":[\"apps\"],\"resources\":[\"deployments/scale\",\"replicasets/scale\"],\"verbs\":[\"get\",\"update\"]},{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\"],\"verbs\":[\"get\",\"create\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - } - ], - "name": "system:kube-dns-autoscaler", - "resourceVersion": "424", - "uid": "41dab087-6351-4618-ac78-ea74a81fd185" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "replicationcontrollers/scale" - ], - "verbs": [ - "get", - "update" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "deployments/scale", - "replicasets/scale" - ], - "verbs": [ - "get", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "get", - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:kube-scheduler", - "resourceVersion": "70", - "uid": "6d69b78a-1eec-49f8-843d-701acd834753" - }, - "rules": [ - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "coordination.k8s.io" - ], - "resources": [ - "leases" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "coordination.k8s.io" - ], - "resourceNames": [ - "kube-scheduler" - ], - "resources": [ - "leases" - ], - "verbs": [ - "get", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "" - ], - "resourceNames": [ - "kube-scheduler" - ], - "resources": [ - "endpoints" - ], - "verbs": [ - "get", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "delete", - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "bindings", - "pods/binding" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods/status" - ], - "verbs": [ - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "replicationcontrollers", - "services" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "replicasets" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "statefulsets" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "policy" - ], - "resources": [ - "poddisruptionbudgets" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims", - "persistentvolumes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "authentication.k8s.io" - ], - "resources": [ - "tokenreviews" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "authorization.k8s.io" - ], - "resources": [ - "subjectaccessreviews" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "csinodes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:kubelet-api-admin", - "resourceVersion": "55", - "uid": "fbe24425-dc44-4555-b61c-d4cbe57a0243" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "proxy" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes/log", - "nodes/metrics", - "nodes/proxy", - "nodes/spec", - "nodes/stats" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-version": "kubestore-collector-rbac-1.0.0", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-version\":\"kubestore-collector-rbac-1.0.0\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:kubestore-collector\"},\"rules\":[{\"apiGroups\":[\"*\"],\"resources\":[\"*\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\",\"events\"],\"verbs\":[\"*\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - } - ], - "name": "system:kubestore-collector", - "resourceVersion": "453", - "uid": "ef38182a-2b80-454a-82de-af39bd2f8a05" - }, - "rules": [ - { - "apiGroups": [ - "*" - ], - "resources": [ - "*" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps", - "events" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "managedcertificates", - "components.gke.io/component-version": "2.1.1", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"managedcertificates\",\"components.gke.io/component-version\":\"2.1.1\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:managed-certificate-controller\"},\"rules\":[{\"apiGroups\":[\"networking.gke.io\"],\"resources\":[\"managedcertificates\"],\"verbs\":[\"*\"]},{\"apiGroups\":[\"networking.k8s.io\"],\"resources\":[\"ingresses\"],\"verbs\":[\"*\"]},{\"apiGroups\":[\"\",\"extensions\"],\"resources\":[\"configmaps\",\"endpoints\",\"events\"],\"verbs\":[\"*\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/layer": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "system:managed-certificate-controller", - "resourceVersion": "25934496", - "uid": "e28936c4-5959-41e5-b9fa-c29a57f38934" - }, - "rules": [ - { - "apiGroups": [ - "networking.gke.io" - ], - "resources": [ - "managedcertificates" - ], - "verbs": [ - "*" - ] - }, - { - "apiGroups": [ - "networking.k8s.io" - ], - "resources": [ - "ingresses" - ], - "verbs": [ - "*" - ] - }, - { - "apiGroups": [ - "", - "extensions" - ], - "resources": [ - "configmaps", - "endpoints", - "events" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:master-monitoring-role\"},\"rules\":[{\"nonResourceURLs\":[\"/metrics\",\"/metrics/*\"],\"verbs\":[\"get\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:29Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-30T14:49:48Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-13T14:29:47Z" - } - ], - "name": "system:master-monitoring-role", - "resourceVersion": "61538089", - "uid": "1d6103b0-0995-45c6-a619-f6e560d20f38" - }, - "rules": [ - { - "nonResourceURLs": [ - "/metrics", - "/metrics/*" - ], - "verbs": [ - "get" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"system:metrics-server\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"pods\",\"nodes\",\"namespaces\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"apps\"],\"resources\":[\"deployments\"],\"verbs\":[\"get\",\"list\",\"update\",\"watch\"]},{\"nonResourceURLs\":[\"/metrics\"],\"verbs\":[\"get\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - } - ], - "name": "system:metrics-server", - "resourceVersion": "406", - "uid": "f97fec54-f218-41ab-9de8-2583000ff519" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "pods", - "nodes", - "namespaces" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "deployments" - ], - "verbs": [ - "get", - "list", - "update", - "watch" - ] - }, - { - "nonResourceURLs": [ - "/metrics" - ], - "verbs": [ - "get" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-07-30T14:54:04Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-07-30T14:54:04Z" - } - ], - "name": "system:monitoring", - "resourceVersion": "25934294", - "uid": "78ab4a8a-9b89-4688-be4e-7f1ac751da81" - }, - "rules": [ - { - "nonResourceURLs": [ - "/healthz", - "/healthz/*", - "/livez", - "/livez/*", - "/metrics", - "/readyz", - "/readyz/*" - ], - "verbs": [ - "get" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:node", - "resourceVersion": "53", - "uid": "80cac46e-2c02-48fe-a6e6-7ec096b9b04e" - }, - "rules": [ - { - "apiGroups": [ - "authentication.k8s.io" - ], - "resources": [ - "tokenreviews" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "authorization.k8s.io" - ], - "resources": [ - "localsubjectaccessreviews", - "subjectaccessreviews" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "services" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "create", - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes/status" - ], - "verbs": [ - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "create", - "delete" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods/status" - ], - "verbs": [ - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods/eviction" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps", - "secrets" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims", - "persistentvolumes" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resources": [ - "certificatesigningrequests" - ], - "verbs": [ - "create", - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "coordination.k8s.io" - ], - "resources": [ - "leases" - ], - "verbs": [ - "create", - "delete", - "get", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "volumeattachments" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims/status" - ], - "verbs": [ - "get", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "serviceaccounts/token" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "csidrivers" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "csinodes" - ], - "verbs": [ - "create", - "delete", - "get", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "node.k8s.io" - ], - "resources": [ - "runtimeclasses" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:node-bootstrapper", - "resourceVersion": "56", - "uid": "7af35770-32ad-4ca7-8aa9-50344364e384" - }, - "rules": [ - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resources": [ - "certificatesigningrequests" - ], - "verbs": [ - "create", - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:node-problem-detector", - "resourceVersion": "54", - "uid": "d4110ca5-e7f2-4847-abea-780c84fd7a73" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes/status" - ], - "verbs": [ - "patch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:node-proxier", - "resourceVersion": "69", - "uid": "4d83a4dd-7eb9-44cb-a354-058c1459a78e" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints", - "services" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "discovery.k8s.io" - ], - "resources": [ - "endpointslices" - ], - "verbs": [ - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:persistent-volume-provisioner", - "resourceVersion": "61", - "uid": "e95e8f8b-12a3-4a83-b330-da573d925278" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumes" - ], - "verbs": [ - "create", - "delete", - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims" - ], - "verbs": [ - "get", - "list", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "storageclasses" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:public-info-viewer", - "resourceVersion": "45", - "uid": "0161b528-eb9a-42df-aeeb-3da7f19217c1" - }, - "rules": [ - { - "nonResourceURLs": [ - "/healthz", - "/livez", - "/readyz", - "/version", - "/version/" - ], - "verbs": [ - "get" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-version": "resource-tracker-rbac-1.0.3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-version\":\"resource-tracker-rbac-1.0.3\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:resource-tracker\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"nodes\",\"persistentvolumeclaims\",\"persistentvolumes\",\"pods\",\"services\",\"configmaps\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\"],\"verbs\":[\"create\",\"delete\",\"update\",\"patch\"]},{\"apiGroups\":[\"storage.k8s.io\"],\"resources\":[\"storageclasses\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"pods/portforward\"],\"verbs\":[\"create\"]},{\"apiGroups\":[\"\"],\"resources\":[\"endpoints\"],\"verbs\":[\"create\",\"get\",\"update\"]},{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"create\",\"patch\"]},{\"apiGroups\":[\"metrics.k8s.io\"],\"resources\":[\"pods\"],\"verbs\":[\"list\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "system:resource-tracker", - "resourceVersion": "487", - "uid": "296c2302-ea39-4a5d-8e99-b33c3eb2aac9" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes", - "persistentvolumeclaims", - "persistentvolumes", - "pods", - "services", - "configmaps" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "create", - "delete", - "update", - "patch" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "storageclasses" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods/portforward" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints" - ], - "verbs": [ - "create", - "get", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch" - ] - }, - { - "apiGroups": [ - "metrics.k8s.io" - ], - "resources": [ - "pods" - ], - "verbs": [ - "list" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-07-30T14:54:04Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-07-30T14:54:04Z" - } - ], - "name": "system:service-account-issuer-discovery", - "resourceVersion": "25934314", - "uid": "e834b9d4-fe7c-47cb-bb13-0daec799abb8" - }, - "rules": [ - { - "nonResourceURLs": [ - "/.well-known/openid-configuration", - "/openid/v1/jwks" - ], - "verbs": [ - "get" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-version": "slo-monitor-rbac-1.0.0", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-version\":\"slo-monitor-rbac-1.0.0\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:slo-monitor\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"pods\",\"events\"],\"verbs\":[\"get\",\"watch\",\"list\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "system:slo-monitor", - "resourceVersion": "491", - "uid": "9b92ed22-7895-494b-89e2-36b32402c5ec" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "pods", - "events" - ], - "verbs": [ - "get", - "watch", - "list" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:volume-scheduler", - "resourceVersion": "64", - "uid": "ea98c42b-a5f4-4e06-8d60-69968f9e2a3c" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumes" - ], - "verbs": [ - "get", - "list", - "patch", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "storageclasses" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims" - ], - "verbs": [ - "get", - "list", - "patch", - "update", - "watch" - ] - } - ] - }, - { - "aggregationRule": { - "clusterRoleSelectors": [ - { - "matchLabels": { - "rbac.authorization.k8s.io/aggregate-to-view": "true" - } - } - ] - }, - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults", - "rbac.authorization.k8s.io/aggregate-to-edit": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:aggregationRule": { - ".": {}, - "f:clusterRoleSelectors": {} - }, - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {}, - "f:rbac.authorization.k8s.io/aggregate-to-edit": {} - } - } - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:rules": {} - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:15Z" - } - ], - "name": "view", - "resourceVersion": "31982303", - "uid": "142ec71e-e611-4532-b0bf-57a0d50a5b27" - }, - "rules": [ - { - "apiGroups": [ - "operators.coreos.com" - ], - "resources": [ - "clusterserviceversions", - "catalogsources", - "installplans", - "subscriptions", - "operatorgroups" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "packages.operators.coreos.com" - ], - "resources": [ - "packagemanifests", - "packagemanifests/icon" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps", - "endpoints", - "persistentvolumeclaims", - "persistentvolumeclaims/status", - "pods", - "replicationcontrollers", - "replicationcontrollers/scale", - "serviceaccounts", - "services", - "services/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "bindings", - "events", - "limitranges", - "namespaces/status", - "pods/log", - "pods/status", - "replicationcontrollers/status", - "resourcequotas", - "resourcequotas/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "namespaces" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "controllerrevisions", - "daemonsets", - "daemonsets/status", - "deployments", - "deployments/scale", - "deployments/status", - "replicasets", - "replicasets/scale", - "replicasets/status", - "statefulsets", - "statefulsets/scale", - "statefulsets/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "autoscaling" - ], - "resources": [ - "horizontalpodautoscalers", - "horizontalpodautoscalers/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "cronjobs", - "cronjobs/status", - "jobs", - "jobs/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "extensions" - ], - "resources": [ - "daemonsets", - "daemonsets/status", - "deployments", - "deployments/scale", - "deployments/status", - "ingresses", - "ingresses/status", - "networkpolicies", - "replicasets", - "replicasets/scale", - "replicasets/status", - "replicationcontrollers/scale" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "policy" - ], - "resources": [ - "poddisruptionbudgets", - "poddisruptionbudgets/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "networking.k8s.io" - ], - "resources": [ - "ingresses", - "ingresses/status", - "networkpolicies" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apiextensions.k8s.io" - ], - "resourceNames": [ - "viziers.px.dev" - ], - "resources": [ - "customresourcedefinitions" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "px.dev" - ], - "resources": [ - "viziers" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:47:13Z", - "labels": { - "olm.opgroup.permissions/aggregate-to-c287d32d82d2c74d-admin": "true", - "rbac.authorization.k8s.io/aggregate-to-admin": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:olm.opgroup.permissions/aggregate-to-c287d32d82d2c74d-admin": {}, - "f:rbac.authorization.k8s.io/aggregate-to-admin": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"5e5f7c01-e1d1-41d4-bb2e-1dc7a7c42f1d\"}": { - ".": {}, - "f:apiVersion": {}, - "f:blockOwnerDeletion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:rules": {} - }, - "manager": "olm", - "operation": "Update", - "time": "2021-08-12T11:47:13Z" - } - ], - "name": "viziers.px.dev-v1alpha1-admin", - "ownerReferences": [ - { - "apiVersion": "apiextensions.k8s.io/v1", - "blockOwnerDeletion": false, - "controller": false, - "kind": "CustomResourceDefinition", - "name": "viziers.px.dev", - "uid": "5e5f7c01-e1d1-41d4-bb2e-1dc7a7c42f1d" - } - ], - "resourceVersion": "31982290", - "uid": "d5c84eeb-8c91-47e5-9a0b-d9ce85b16421" - }, - "rules": [ - { - "apiGroups": [ - "px.dev" - ], - "resources": [ - "viziers" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:47:13Z", - "labels": { - "olm.opgroup.permissions/aggregate-to-c287d32d82d2c74d-view": "true", - "rbac.authorization.k8s.io/aggregate-to-view": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:olm.opgroup.permissions/aggregate-to-c287d32d82d2c74d-view": {}, - "f:rbac.authorization.k8s.io/aggregate-to-view": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"5e5f7c01-e1d1-41d4-bb2e-1dc7a7c42f1d\"}": { - ".": {}, - "f:apiVersion": {}, - "f:blockOwnerDeletion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:rules": {} - }, - "manager": "olm", - "operation": "Update", - "time": "2021-08-12T11:47:13Z" - } - ], - "name": "viziers.px.dev-v1alpha1-crdview", - "ownerReferences": [ - { - "apiVersion": "apiextensions.k8s.io/v1", - "blockOwnerDeletion": false, - "controller": false, - "kind": "CustomResourceDefinition", - "name": "viziers.px.dev", - "uid": "5e5f7c01-e1d1-41d4-bb2e-1dc7a7c42f1d" - } - ], - "resourceVersion": "31982302", - "uid": "1d76939f-c6e7-47e6-b611-49af0ac55de7" - }, - "rules": [ - { - "apiGroups": [ - "apiextensions.k8s.io" - ], - "resourceNames": [ - "viziers.px.dev" - ], - "resources": [ - "customresourcedefinitions" - ], - "verbs": [ - "get" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:47:13Z", - "labels": { - "olm.opgroup.permissions/aggregate-to-c287d32d82d2c74d-edit": "true", - "rbac.authorization.k8s.io/aggregate-to-edit": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:olm.opgroup.permissions/aggregate-to-c287d32d82d2c74d-edit": {}, - "f:rbac.authorization.k8s.io/aggregate-to-edit": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"5e5f7c01-e1d1-41d4-bb2e-1dc7a7c42f1d\"}": { - ".": {}, - "f:apiVersion": {}, - "f:blockOwnerDeletion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:rules": {} - }, - "manager": "olm", - "operation": "Update", - "time": "2021-08-12T11:47:13Z" - } - ], - "name": "viziers.px.dev-v1alpha1-edit", - "ownerReferences": [ - { - "apiVersion": "apiextensions.k8s.io/v1", - "blockOwnerDeletion": false, - "controller": false, - "kind": "CustomResourceDefinition", - "name": "viziers.px.dev", - "uid": "5e5f7c01-e1d1-41d4-bb2e-1dc7a7c42f1d" - } - ], - "resourceVersion": "31982293", - "uid": "2226bd1f-8353-4de9-84b7-de9cbe594d26" - }, - "rules": [ - { - "apiGroups": [ - "px.dev" - ], - "resources": [ - "viziers" - ], - "verbs": [ - "create", - "update", - "patch", - "delete" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:47:13Z", - "labels": { - "olm.opgroup.permissions/aggregate-to-c287d32d82d2c74d-view": "true", - "rbac.authorization.k8s.io/aggregate-to-view": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:olm.opgroup.permissions/aggregate-to-c287d32d82d2c74d-view": {}, - "f:rbac.authorization.k8s.io/aggregate-to-view": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"5e5f7c01-e1d1-41d4-bb2e-1dc7a7c42f1d\"}": { - ".": {}, - "f:apiVersion": {}, - "f:blockOwnerDeletion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:rules": {} - }, - "manager": "olm", - "operation": "Update", - "time": "2021-08-12T11:47:13Z" - } - ], - "name": "viziers.px.dev-v1alpha1-view", - "ownerReferences": [ - { - "apiVersion": "apiextensions.k8s.io/v1", - "blockOwnerDeletion": false, - "controller": false, - "kind": "CustomResourceDefinition", - "name": "viziers.px.dev", - "uid": "5e5f7c01-e1d1-41d4-bb2e-1dc7a7c42f1d" - } - ], - "resourceVersion": "31982297", - "uid": "ce4493ae-225b-4d2a-921a-c22b2926e817" - }, - "rules": [ - { - "apiGroups": [ - "px.dev" - ], - "resources": [ - "viziers" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-controller-role-binding\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-controller-role-binding\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"ca-controller-roles\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"ca-controller-service-account\",\"namespace\":\"cyberarmor-system\"}]}\n" - }, - "creationTimestamp": "2021-10-12T00:18:37Z", - "labels": { - "app": "ca-controller-role-binding", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:37Z" - } - ], - "name": "ca-controller-role-binding", - "resourceVersion": "60786656", - "uid": "cfba68fb-640f-48da-937f-280051340148" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "ca-controller-roles" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "ca-controller-service-account", - "namespace": "cyberarmor-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "cluster-admin", - "resourceVersion": "100", - "uid": "767593c3-9a03-487f-9feb-0ce68bcb7cb7" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "cluster-admin" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Group", - "name": "system:masters" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "updateinfo-crd", - "components.gke.io/component-version": "1.1.0", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"updateinfo-crd\",\"components.gke.io/component-version\":\"1.1.0\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"cluster-autoscaler-updateinfo\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"read-updateinfo\"},\"subjects\":[{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"User\",\"name\":\"cluster-autoscaler\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:43Z" - } - ], - "name": "cluster-autoscaler-updateinfo", - "resourceVersion": "25934522", - "uid": "58406120-6791-4537-bf45-45201201686e" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "read-updateinfo" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "cluster-autoscaler" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"event-exporter\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"event-exporter-rb\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"view\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"event-exporter-sa\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "event-exporter", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - } - ], - "name": "event-exporter-rb", - "resourceVersion": "352", - "uid": "105bdc3d-99f8-41f8-adf0-ccef573d093e" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "view" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "event-exporter-sa", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"gce:beta:kubelet-certificate-bootstrap\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"gce:beta:kubelet-certificate-bootstrap\"},\"subjects\":[{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"User\",\"name\":\"kubelet\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:30Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:30Z" - } - ], - "name": "gce:beta:kubelet-certificate-bootstrap", - "resourceVersion": "614", - "uid": "346557aa-9bac-442a-8f58-7467d21cdb87" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "gce:beta:kubelet-certificate-bootstrap" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "kubelet" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"gce:beta:kubelet-certificate-rotation\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"gce:beta:kubelet-certificate-rotation\"},\"subjects\":[{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"Group\",\"name\":\"system:nodes\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:30Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:30Z" - } - ], - "name": "gce:beta:kubelet-certificate-rotation", - "resourceVersion": "615", - "uid": "7f45fe58-0bd1-42ba-9248-ca38daea62af" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "gce:beta:kubelet-certificate-rotation" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Group", - "name": "system:nodes" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"gce:cloud-provider\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"gce:cloud-provider\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"cloud-provider\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "gce:cloud-provider", - "resourceVersion": "592", - "uid": "1165920c-f1ba-41dd-8989-fc725e8775e5" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "gce:cloud-provider" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "cloud-provider", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"gke-metrics-agent\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"gke-metrics-agent\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"gke-metrics-agent\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - } - ], - "name": "gke-metrics-agent", - "resourceVersion": "439", - "uid": "1ead786c-f22a-43e9-825c-b0b25b7f2fd3" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "gke-metrics-agent" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "gke-metrics-agent", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"hipster-cluster-role-binding\"},\"name\":\"hipster-cluster-role-binding\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"hipster-secret-access\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"hipster-account\",\"namespace\":\"$NAMESPACE\"}]}\n" - }, - "creationTimestamp": "2021-07-04T18:22:52Z", - "labels": { - "app": "hipster-cluster-role-binding" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-04T18:22:52Z" - } - ], - "name": "hipster-cluster-role-binding", - "resourceVersion": "11500882", - "uid": "90857ecf-43c8-4738-9b11-372b5f0e3b85" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "hipster-secret-access" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "hipster-account", - "namespace": "$NAMESPACE" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"kube-apiserver-kubelet-api-admin\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"kubelet-api-admin\"},\"subjects\":[{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"User\",\"name\":\"kube-apiserver\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:30Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:30Z" - } - ], - "name": "kube-apiserver-kubelet-api-admin", - "resourceVersion": "612", - "uid": "b9e26e05-727c-46a1-bc6a-a82b69463ae2" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "kubelet-api-admin" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "kube-apiserver" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"kubelet-bootstrap\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:node-bootstrapper\"},\"subjects\":[{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"User\",\"name\":\"kubelet\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:30Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:30Z" - } - ], - "name": "kubelet-bootstrap", - "resourceVersion": "618", - "uid": "9bdc3cb3-2efd-4856-8342-326fe728044a" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:node-bootstrapper" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "kubelet" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kubelet-bootstrap-certificate-bootstrap\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"gce:beta:kubelet-certificate-bootstrap\"},\"subjects\":[{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"User\",\"name\":\"kubelet-bootstrap\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - } - ], - "name": "kubelet-bootstrap-certificate-bootstrap", - "resourceVersion": "345", - "uid": "5542c268-5503-40b3-9550-6b4acbba4dc4" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "gce:beta:kubelet-certificate-bootstrap" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "kubelet-bootstrap" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kubelet-bootstrap-node-bootstrapper\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:node-bootstrapper\"},\"subjects\":[{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"User\",\"name\":\"kubelet-bootstrap\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - } - ], - "name": "kubelet-bootstrap-node-bootstrapper", - "resourceVersion": "344", - "uid": "68110c9c-4f03-4a8b-96c6-7ea9364e962f" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:node-bootstrapper" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "kubelet-bootstrap" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:18Z", - "labels": { - "addonmanager.kubernetes.io/mode": "EnsureExists" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:18Z" - } - ], - "name": "kubelet-cluster-admin", - "resourceVersion": "306", - "uid": "c214c15e-3507-4714-89ec-92429d0b0147" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:node" - } - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kubelet-user-npd-binding\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:node-problem-detector\"},\"subjects\":[{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"User\",\"name\":\"kubelet\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - } - ], - "name": "kubelet-user-npd-binding", - "resourceVersion": "408", - "uid": "34e7de1f-c4cf-4d94-a28d-adda53de66fd" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:node-problem-detector" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "kubelet" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1beta1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"master-monitoring-role-binding\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:master-monitoring-role\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:master-prom-to-sd-monitor\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:29Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1beta1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-30T14:49:48Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1beta1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-13T14:29:47Z" - } - ], - "name": "master-monitoring-role-binding", - "resourceVersion": "61538090", - "uid": "761c923e-15d0-43e5-ae01-3a7aba89c7ee" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:master-monitoring-role" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:master-prom-to-sd-monitor" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"metrics-server:system:auth-delegator\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:auth-delegator\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"metrics-server\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - } - ], - "name": "metrics-server:system:auth-delegator", - "resourceVersion": "387", - "uid": "3a7c1315-7136-49b6-a4fc-78906206c6b8" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:auth-delegator" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "metrics-server", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"npd-binding\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:node-problem-detector\"},\"subjects\":[{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"User\",\"name\":\"system:node-problem-detector\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - } - ], - "name": "npd-binding", - "resourceVersion": "411", - "uid": "c29ba1c8-6835-4098-a8c2-0ea79c6bbee8" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:node-problem-detector" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:node-problem-detector" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "creationTimestamp": "2021-08-12T11:45:59Z", - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "px", - "operation": "Update", - "time": "2021-08-12T11:45:58Z" - } - ], - "name": "olm-operator-binding-olm", - "resourceVersion": "31981653", - "uid": "785e5e62-2730-4cb4-aea1-7d070f715b4b" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:operator-lifecycle-manager" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "olm-operator-serviceaccount", - "namespace": "olm" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "creationTimestamp": "2021-08-31T19:47:18Z", - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "px", - "operation": "Update", - "time": "2021-08-31T19:47:18Z" - } - ], - "name": "olm-operator-cluster-binding-olm", - "resourceVersion": "41268496", - "uid": "ee936583-82fd-44ad-a4a1-3b2c4ccdfca5" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:operator-lifecycle-manager" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "olm-operator-serviceaccount", - "namespace": "olm" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-controller-attacher-binding\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"pdcsi-attacher-role\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:pdcsi-controller\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-controller-attacher-binding", - "resourceVersion": "473", - "uid": "25cbf00e-7147-4218-bd41-5bd170d676f6" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "pdcsi-attacher-role" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:pdcsi-controller" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-controller-provisioner-binding\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"pdcsi-provisioner-role\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:pdcsi-controller\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-controller-provisioner-binding", - "resourceVersion": "474", - "uid": "351d5c33-fed3-4b4d-b2e0-1a94f8aff7d0" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "pdcsi-provisioner-role" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:pdcsi-controller" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-controller-resizer-binding\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"pdcsi-resizer-role\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:pdcsi-controller\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-controller-resizer-binding", - "resourceVersion": "475", - "uid": "fcc9c395-88fe-46c2-9ff4-4307668020f2" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "pdcsi-resizer-role" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:pdcsi-controller" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-snapshotter-binding\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"pdcsi-snapshotter-role\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:pdcsi-controller\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-snapshotter-binding", - "resourceVersion": "476", - "uid": "5551c696-5c10-4d11-9adb-8470da461e9a" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "pdcsi-snapshotter-role" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:pdcsi-controller" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "creationTimestamp": "2021-08-31T19:48:24Z", - "labels": { - "olm.owner": "pixie-operator.v0.0.7", - "olm.owner.kind": "ClusterServiceVersion", - "olm.owner.namespace": "px-operator", - "operators.coreos.com/pixie-operator.px-operator": "" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:olm.owner": {}, - "f:olm.owner.kind": {}, - "f:olm.owner.namespace": {}, - "f:operators.coreos.com/pixie-operator.px-operator": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "olm", - "operation": "Update", - "time": "2021-08-31T19:48:25Z" - } - ], - "name": "pixie-operator.v0.0.7-pixie-operator-service-account-7d476f658d", - "resourceVersion": "41269054", - "uid": "bf81fc5f-440d-408d-a86d-fef95d011945" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "pixie-operator.v0.0.7-pixie-operator-service-account-7d476f658d" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "pixie-operator-service-account", - "namespace": "px-operator" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "snapshot-controller", - "components.gke.io/component-version": "0.5.5", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"snapshot-controller\",\"components.gke.io/component-version\":\"0.5.5\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"snapshot-controller-role\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"snapshot-controller-runner\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:snapshot-controller\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/layer": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:42Z" - } - ], - "name": "snapshot-controller-role", - "resourceVersion": "41911915", - "uid": "da34013c-4a9b-4381-a34d-4029c663c2f6" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "snapshot-controller-runner" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:snapshot-controller" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"stackdriver:metadata-agent\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"stackdriver:metadata-agent\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"metadata-agent\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - } - ], - "name": "stackdriver:metadata-agent", - "resourceVersion": "375", - "uid": "ec30c963-04d8-4efe-afab-cd15e00c5f62" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "stackdriver:metadata-agent" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "metadata-agent", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "storageversionmigrator-rbac", - "components.gke.io/component-version": "0.0.3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"storageversionmigrator-rbac\",\"components.gke.io/component-version\":\"0.0.3\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"storage-version-migration-crd-creator\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"storage-version-migration-crd-creator\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:storageversionmigrator\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - } - ], - "name": "storage-version-migration-crd-creator", - "resourceVersion": "560", - "uid": "3d4cc8c6-283b-46da-9682-75b47008da41" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "storage-version-migration-crd-creator" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:storageversionmigrator" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "storageversionmigrator-rbac", - "components.gke.io/component-version": "0.0.3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"storageversionmigrator-rbac\",\"components.gke.io/component-version\":\"0.0.3\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"storage-version-migration-initializer\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"storage-version-migration-initializer\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:storageversionmigrator\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - } - ], - "name": "storage-version-migration-initializer", - "resourceVersion": "561", - "uid": "6421b1e0-0538-4d0a-90cf-f5b6f7d90afd" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "storage-version-migration-initializer" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:storageversionmigrator" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "storageversionmigrator-rbac", - "components.gke.io/component-version": "0.0.3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"storageversionmigrator-rbac\",\"components.gke.io/component-version\":\"0.0.3\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"storage-version-migration-migrator-v2\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"cluster-admin\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:storageversionmigrator\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - } - ], - "name": "storage-version-migration-migrator-v2", - "resourceVersion": "558", - "uid": "0d578d6b-cd6b-4c7e-8762-ac644e9a7f53" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "cluster-admin" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:storageversionmigrator" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "storageversionmigrator-rbac", - "components.gke.io/component-version": "0.0.3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"storageversionmigrator-rbac\",\"components.gke.io/component-version\":\"0.0.3\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"storage-version-migration-trigger\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"storage-version-migration-trigger\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:storageversionmigrator\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - } - ], - "name": "storage-version-migration-trigger", - "resourceVersion": "559", - "uid": "6fc5b149-a81f-4165-a8cf-12857822cc2c" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "storage-version-migration-trigger" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:storageversionmigrator" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:basic-user", - "resourceVersion": "102", - "uid": "4e08185a-7034-409b-bb35-cae291bcaac4" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:basic-user" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Group", - "name": "system:authenticated" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "clustermetrics-rbac", - "components.gke.io/component-version": "1.4.0", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"clustermetrics-rbac\",\"components.gke.io/component-version\":\"1.4.0\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:clustermetrics\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:clustermetrics\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:clustermetrics\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - } - ], - "name": "system:clustermetrics", - "resourceVersion": "428", - "uid": "66d5f746-6647-4cdf-a764-09d02aba3c9b" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:clustermetrics" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:clustermetrics" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:attachdetach-controller", - "resourceVersion": "110", - "uid": "cd980aaa-da46-4eca-a307-93ae835ad974" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:attachdetach-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "attachdetach-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:certificate-controller", - "resourceVersion": "135", - "uid": "b5b1f44b-b323-4c63-bb95-7a9abd1b0a99" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:certificate-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "certificate-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:clusterrole-aggregation-controller", - "resourceVersion": "111", - "uid": "bcbd8c05-f184-49fa-a747-f16395362d31" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:clusterrole-aggregation-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "clusterrole-aggregation-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:cronjob-controller", - "resourceVersion": "112", - "uid": "619c05fc-f079-478b-9e02-5c2672f84dae" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:cronjob-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "cronjob-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:daemon-set-controller", - "resourceVersion": "113", - "uid": "cdd5f999-88f2-41b5-a0bd-f0b619a8d8e8" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:daemon-set-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "daemon-set-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:deployment-controller", - "resourceVersion": "114", - "uid": "4e8db74b-595e-46a8-8838-10398dccfaaf" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:deployment-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "deployment-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:disruption-controller", - "resourceVersion": "115", - "uid": "f623e973-3389-430a-bb3e-47428604614d" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:disruption-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "disruption-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:endpoint-controller", - "resourceVersion": "116", - "uid": "084c808b-8ade-4df6-912d-60cf6b1fc989" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:endpoint-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "endpoint-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:endpointslice-controller", - "resourceVersion": "117", - "uid": "4c0b4944-80d6-42f7-894d-0160459f0548" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:endpointslice-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "endpointslice-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:endpointslicemirroring-controller", - "resourceVersion": "118", - "uid": "3da4f465-3907-4042-b52c-8529bf01f05e" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:endpointslicemirroring-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "endpointslicemirroring-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:expand-controller", - "resourceVersion": "119", - "uid": "cc1a6171-787e-415c-9084-96cae4346409" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:expand-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "expand-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:generic-garbage-collector", - "resourceVersion": "120", - "uid": "d9fba7ad-f8bd-41af-ae46-09dd5eb48668" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:generic-garbage-collector" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "generic-garbage-collector", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:controller:glbc\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:controller:glbc\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:controller:glbc\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:30Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:30Z" - } - ], - "name": "system:controller:glbc", - "resourceVersion": "611", - "uid": "1d75f06c-24ec-49ff-8363-0080cd92ad5b" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:glbc" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:controller:glbc" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:horizontal-pod-autoscaler", - "resourceVersion": "121", - "uid": "f093fe6e-c91f-419d-9247-4cec95a9bde1" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:horizontal-pod-autoscaler" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "horizontal-pod-autoscaler", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:job-controller", - "resourceVersion": "122", - "uid": "075db69a-cadf-496e-b0b4-5bf678ecd75d" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:job-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "job-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:namespace-controller", - "resourceVersion": "123", - "uid": "e9524cee-2d5f-4767-b215-f3920387ee1a" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:namespace-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "namespace-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:node-controller", - "resourceVersion": "124", - "uid": "225b3aa4-6e67-4684-85c6-7d5d72dc3ebd" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:node-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "node-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:persistent-volume-binder", - "resourceVersion": "125", - "uid": "0b404e82-8b0f-4f85-a210-fdbebef82d05" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:persistent-volume-binder" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "persistent-volume-binder", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:pod-garbage-collector", - "resourceVersion": "126", - "uid": "59d06c07-e622-4f79-8b2a-bf0df02e14aa" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:pod-garbage-collector" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "pod-garbage-collector", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:pv-protection-controller", - "resourceVersion": "137", - "uid": "0fda5772-2aba-4b3e-93db-ab52d3ab7c69" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:pv-protection-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "pv-protection-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:pvc-protection-controller", - "resourceVersion": "136", - "uid": "5a484ad7-5d1a-41b2-9f9f-7194890989ea" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:pvc-protection-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "pvc-protection-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:replicaset-controller", - "resourceVersion": "127", - "uid": "5f0005f1-a4d6-4fb8-bc82-96b2c04c8930" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:replicaset-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "replicaset-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:replication-controller", - "resourceVersion": "128", - "uid": "d5c35687-ebeb-47d0-805a-a28cfe68caf1" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:replication-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "replication-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:resourcequota-controller", - "resourceVersion": "129", - "uid": "7afc3566-931b-4ada-b4b4-44c3be3d060a" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:resourcequota-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "resourcequota-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:root-ca-cert-publisher", - "resourceVersion": "138", - "uid": "135e0be6-ce12-48e3-b320-08912d3c64e1" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:root-ca-cert-publisher" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "root-ca-cert-publisher", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:route-controller", - "resourceVersion": "130", - "uid": "5bbca500-5cd9-458d-8c91-137088ad940c" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:route-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "route-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:service-account-controller", - "resourceVersion": "131", - "uid": "2c819998-9e2b-4644-a325-9890d9c5b16c" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:service-account-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "service-account-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:service-controller", - "resourceVersion": "132", - "uid": "07bc6706-5246-4785-8990-d0ca7c1f36b7" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:service-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "service-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:statefulset-controller", - "resourceVersion": "133", - "uid": "51ea4194-b0db-441e-bbc5-fbe51f210d2f" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:statefulset-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "statefulset-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:ttl-controller", - "resourceVersion": "134", - "uid": "787acc9c-35e8-4132-896f-758632fa413c" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:ttl-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "ttl-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:discovery", - "resourceVersion": "101", - "uid": "07bd0905-f126-4d79-9c33-2602c3d535a9" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:discovery" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Group", - "name": "system:authenticated" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "gcp-controller-manager-combined", - "components.gke.io/component-version": "2.1.10", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"gcp-controller-manager-combined\",\"components.gke.io/component-version\":\"2.1.10\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gcp-controller-manager\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:gcp-controller-manager\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:gcp-controller-manager\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/layer": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "system:gcp-controller-manager", - "resourceVersion": "41911910", - "uid": "28dc8e28-dc41-47d9-802e-09b86f4779f4" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:gcp-controller-manager" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:gcp-controller-manager" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "gke-common-webhooks-rbac", - "components.gke.io/component-version": "1.1.2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"gke-common-webhooks-rbac\",\"components.gke.io/component-version\":\"1.1.2\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-common-webhooks\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:gke-common-webhooks\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:gke-common-webhooks\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "system:gke-common-webhooks", - "resourceVersion": "46217992", - "uid": "5d5583bd-a4c4-4f1b-a9c4-65b2d31f7cc9" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:gke-common-webhooks" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:gke-common-webhooks" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-controller\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:gke-controller\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:vpa-recommender\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - } - ], - "name": "system:gke-controller", - "resourceVersion": "570", - "uid": "51bf3954-3bac-4b46-8017-7a1539840f83" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:gke-controller" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:vpa-recommender", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-hpa-actor\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:gke-hpa-actor\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:vpa-recommender\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - } - ], - "name": "system:gke-hpa-actor", - "resourceVersion": "572", - "uid": "28ceb49d-0088-45ed-b0fc-cccd5d8cdb84" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:gke-hpa-actor" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:vpa-recommender", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-hpa-service-reader\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:gke-hpa-service-reader\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:vpa-recommender\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "system:gke-hpa-service-reader", - "resourceVersion": "578", - "uid": "cd90142e-0aa5-48da-b68c-a51093137a90" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:gke-hpa-service-reader" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:vpa-recommender", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "gke-master-healthcheck-rbac", - "components.gke.io/component-version": "1.0.2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"gke-master-healthcheck-rbac\",\"components.gke.io/component-version\":\"1.0.2\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-master-healthcheck\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:gke-master-healthcheck\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:gke-master-healthcheck\"}]}\n" - }, - "creationTimestamp": "2021-07-30T14:54:41Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "system:gke-master-healthcheck", - "resourceVersion": "25934491", - "uid": "86d2d389-a1c8-4a7b-9d24-da4a5d386ccd" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:gke-master-healthcheck" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:gke-master-healthcheck" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-version": "resourcequota-rbac-1.0.1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-version\":\"resourcequota-rbac-1.0.1\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-master-resourcequota\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:gke-master-resourcequota\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:gke-master-resourcequota\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "system:gke-master-resourcequota", - "resourceVersion": "490", - "uid": "be65d218-7d4b-4c2b-a59c-4c1d9bbbab5a" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:gke-master-resourcequota" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:gke-master-resourcequota" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-uas-collection-reader\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:gke-uas-collection-reader\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:vpa-recommender\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "system:gke-uas-collection-reader", - "resourceVersion": "582", - "uid": "b52868d2-d8cd-4815-a758-0d2fca35217d" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:gke-uas-collection-reader" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:vpa-recommender", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-uas-hpa-controller\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:controller:horizontal-pod-autoscaler\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:vpa-recommender\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "system:gke-uas-hpa-controller", - "resourceVersion": "583", - "uid": "c2508017-ca0d-4c74-a795-ad9a55b47894" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:horizontal-pod-autoscaler" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:vpa-recommender", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-uas-metrics-reader\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:gke-uas-metrics-reader\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:vpa-recommender\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "system:gke-uas-metrics-reader", - "resourceVersion": "581", - "uid": "f47adfa0-bbce-4d34-9fbf-3f90a48c1969" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:gke-uas-metrics-reader" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:vpa-recommender", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "l7-lb-controller-rbac", - "components.gke.io/component-version": "1.0.9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"l7-lb-controller-rbac\",\"components.gke.io/component-version\":\"1.0.9\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:glbc-status\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:glbc-status\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:controller:glbc\"},{\"kind\":\"User\",\"name\":\"system:l7-lb-controller\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:subjects": {} - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "system:glbc-status", - "resourceVersion": "25934494", - "uid": "31208058-923b-4ac4-b044-7175f6bf50f1" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:glbc-status" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:controller:glbc" - }, - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:l7-lb-controller" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:kube-controller-manager", - "resourceVersion": "105", - "uid": "b179f10e-160c-41b7-bbbd-1c7c27f3c408" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:kube-controller-manager" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:kube-controller-manager" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:kube-dns", - "resourceVersion": "106", - "uid": "c1f00169-4fb2-4b86-b867-353b794fa22b" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:kube-dns" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "kube-dns", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:kube-dns-autoscaler\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:kube-dns-autoscaler\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"kube-dns-autoscaler\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - } - ], - "name": "system:kube-dns-autoscaler", - "resourceVersion": "426", - "uid": "8e6e8120-c533-4250-8761-af3c22c317db" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:kube-dns-autoscaler" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "kube-dns-autoscaler", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:kube-proxy\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:node-proxier\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "system:kube-proxy", - "resourceVersion": "590", - "uid": "7063d042-e1c3-4976-9579-c457b2bb541b" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:node-proxier" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "kube-proxy", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:kube-scheduler", - "resourceVersion": "107", - "uid": "b0818751-4feb-468e-87cc-a89b09f8bde6" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:kube-scheduler" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:kube-scheduler" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-version": "kubestore-collector-rbac-1.0.0", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-version\":\"kubestore-collector-rbac-1.0.0\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:kubestore-collector\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:kubestore-collector\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:kubestore-collector\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - } - ], - "name": "system:kubestore-collector", - "resourceVersion": "455", - "uid": "4bda0277-92be-4101-b359-07dc63390e05" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:kubestore-collector" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:kubestore-collector" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "managedcertificates", - "components.gke.io/component-version": "2.1.1", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"managedcertificates\",\"components.gke.io/component-version\":\"2.1.1\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:managed-certificate-controller\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:managed-certificate-controller\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:managed-certificate-controller\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/layer": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "system:managed-certificate-controller", - "resourceVersion": "25934497", - "uid": "da5317a2-50ef-4c1d-8636-d0849ae86fc7" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:managed-certificate-controller" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:managed-certificate-controller" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"system:metrics-server\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:metrics-server\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"metrics-server\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - } - ], - "name": "system:metrics-server", - "resourceVersion": "407", - "uid": "60ca2339-bce8-49c3-92d0-9edf128195fb" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:metrics-server" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "metrics-server", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-07-30T14:54:04Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-07-30T14:54:04Z" - } - ], - "name": "system:monitoring", - "resourceVersion": "25934315", - "uid": "5960b55d-5163-44f0-8f8a-c43bbfee968a" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:monitoring" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Group", - "name": "system:monitoring" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - } - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:node", - "resourceVersion": "109", - "uid": "4e075ff5-5e41-4cea-8682-9809ad364d3d" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:node" - } - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:node-proxier", - "resourceVersion": "104", - "uid": "a79558a3-4226-4488-9420-9844112380bf" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:node-proxier" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:kube-proxy" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:public-info-viewer", - "resourceVersion": "103", - "uid": "8bf79bf3-cadc-4d7e-ae6f-637c66427869" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:public-info-viewer" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Group", - "name": "system:authenticated" - }, - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Group", - "name": "system:unauthenticated" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-version": "resource-tracker-rbac-1.0.3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-version\":\"resource-tracker-rbac-1.0.3\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:resource-tracker\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:resource-tracker\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:resource-tracker\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "system:resource-tracker", - "resourceVersion": "488", - "uid": "65ace9bf-cd59-426c-894e-3bb0c9db843e" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:resource-tracker" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:resource-tracker" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-07-30T14:54:04Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-07-30T14:54:04Z" - } - ], - "name": "system:service-account-issuer-discovery", - "resourceVersion": "25934316", - "uid": "03b41271-63d3-4dac-b123-74d85df2ca96" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:service-account-issuer-discovery" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Group", - "name": "system:serviceaccounts" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-version": "slo-monitor-rbac-1.0.0", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-version\":\"slo-monitor-rbac-1.0.0\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:slo-monitor\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:slo-monitor\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:slo-monitor\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "system:slo-monitor", - "resourceVersion": "492", - "uid": "bf0c2c9e-c51b-4a40-a2af-2a6f1617aa4a" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:slo-monitor" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:slo-monitor" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:volume-scheduler", - "resourceVersion": "108", - "uid": "b9842bff-c6f7-4a25-9f81-38595cea9657" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:volume-scheduler" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:kube-scheduler" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"uas-hpa-external-metrics-reader\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"external-metrics-reader\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:vpa-recommender\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "uas-hpa-external-metrics-reader", - "resourceVersion": "576", - "uid": "ba970b84-3fb6-4733-9491-ef5cf45499b6" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "external-metrics-reader" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:vpa-recommender", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:bootstrap-signer", - "namespace": "kube-public", - "resourceVersion": "152", - "uid": "b6b238ee-2368-4b09-8270-d3f69e5c0fcd" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Role", - "name": "system:controller:bootstrap-signer" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "bootstrap-signer", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"RoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"gce:cloud-provider\",\"namespace\":\"kube-system\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"Role\",\"name\":\"gce:cloud-provider\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"cloud-provider\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "gce:cloud-provider", - "namespace": "kube-system", - "resourceVersion": "591", - "uid": "b8108b42-5f6c-4586-bd57-a89a1026daec" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Role", - "name": "gce:cloud-provider" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "cloud-provider", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"RoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"gce:podsecuritypolicy:pdcsi-node-sa\",\"namespace\":\"kube-system\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"gce:podsecuritypolicy:privileged\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"pdcsi-node-sa\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "gce:podsecuritypolicy:pdcsi-node-sa", - "namespace": "kube-system", - "resourceVersion": "479", - "uid": "0576b902-dd80-4c39-90a4-ec7b6685df33" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "gce:podsecuritypolicy:privileged" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "pdcsi-node-sa", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"RoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"metrics-server-auth-reader\",\"namespace\":\"kube-system\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"Role\",\"name\":\"extension-apiserver-authentication-reader\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"metrics-server\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - } - ], - "name": "metrics-server-auth-reader", - "namespace": "kube-system", - "resourceVersion": "388", - "uid": "4df75e62-ae78-4ac1-ba91-bb4893192193" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Role", - "name": "extension-apiserver-authentication-reader" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "metrics-server", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"RoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-leaderelection-binding\",\"namespace\":\"kube-system\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"Role\",\"name\":\"pdcsi-leaderelection\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:pdcsi-controller\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-leaderelection-binding", - "namespace": "kube-system", - "resourceVersion": "478", - "uid": "d7834739-a3cc-4597-980d-b38c92d650d1" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Role", - "name": "pdcsi-leaderelection" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:pdcsi-controller" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "snapshot-controller", - "components.gke.io/component-version": "0.5.5", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"RoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"snapshot-controller\",\"components.gke.io/component-version\":\"0.5.5\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"snapshot-controller-leaderelection\",\"namespace\":\"kube-system\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"Role\",\"name\":\"snapshot-controller-leaderelection\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:snapshot-controller\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/layer": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:42Z" - } - ], - "name": "snapshot-controller-leaderelection", - "namespace": "kube-system", - "resourceVersion": "41911917", - "uid": "d10b71db-b7b0-4961-8f65-effae5ce08e7" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Role", - "name": "snapshot-controller-leaderelection" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:snapshot-controller" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system::extension-apiserver-authentication-reader", - "namespace": "kube-system", - "resourceVersion": "146", - "uid": "ef96ba2c-ae80-48e0-8d3e-927b179089ea" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Role", - "name": "extension-apiserver-authentication-reader" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:kube-controller-manager" - }, - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:kube-scheduler" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system::leader-locking-kube-controller-manager", - "namespace": "kube-system", - "resourceVersion": "147", - "uid": "6f052bf4-0500-48e7-9b3e-b076f440590a" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Role", - "name": "system::leader-locking-kube-controller-manager" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:kube-controller-manager" - }, - { - "kind": "ServiceAccount", - "name": "kube-controller-manager", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system::leader-locking-kube-scheduler", - "namespace": "kube-system", - "resourceVersion": "148", - "uid": "5b23da24-b385-436e-a430-c0fbd2db9fbf" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Role", - "name": "system::leader-locking-kube-scheduler" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:kube-scheduler" - }, - { - "kind": "ServiceAccount", - "name": "kube-scheduler", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:bootstrap-signer", - "namespace": "kube-system", - "resourceVersion": "149", - "uid": "93252e49-68b8-4c9c-a9f0-b87f16276c4c" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Role", - "name": "system:controller:bootstrap-signer" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "bootstrap-signer", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:cloud-provider", - "namespace": "kube-system", - "resourceVersion": "150", - "uid": "4b095089-e837-4b41-869c-0c9a06b8586d" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Role", - "name": "system:controller:cloud-provider" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "cloud-provider", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"RoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:controller:glbc\",\"namespace\":\"kube-system\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"Role\",\"name\":\"system:controller:glbc\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:controller:glbc\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:30Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:30Z" - } - ], - "name": "system:controller:glbc", - "namespace": "kube-system", - "resourceVersion": "610", - "uid": "ec9f28da-888c-4172-a3eb-ae4b8a1b5022" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Role", - "name": "system:controller:glbc" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:controller:glbc" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:token-cleaner", - "namespace": "kube-system", - "resourceVersion": "151", - "uid": "7127f640-8c3c-417c-bbb1-6795ccacc64e" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Role", - "name": "system:controller:token-cleaner" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "token-cleaner", - "namespace": "kube-system" - } - ] - } - ], - "listInputKinds": null - } - ], - "remediation": "You should apply least privilege principle. Make sure cluster admin permissions are granted only when it is absolutely necessary. Don't use subjects with such high permissions for daily operations.", - "description": "Attackers who have cluster admin permissions (can perform any action on any resource), can take advantage of their privileges for malicious activities. This control determines which subjects have cluster admin permissions.", - "score": 100 - }, - { - "guid": "", - "attributes": { - "armoBuiltin": true, - "microsoftMitreColumns": [ - "Execution" - ] - }, - "id": "C-0002", - "controlID": "C-0002", - "name": "Exec into container", - "ruleReports": [ - { - "name": "exec-into-container", - "remediation": "", - "ruleStatus": { - "status": "success", - "message": "" - }, - "ruleResponses": [ - { - "alertMessage": "the following ServiceAccount: ca-controller-service-account, can exec into containers", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-controller-roles\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-controller-roles\"},\"rules\":[{\"apiGroups\":[\"*\"],\"resources\":[\"*\"],\"verbs\":[\"*\"]}]}\n" - }, - "creationTimestamp": "2021-10-12T00:18:37Z", - "labels": { - "app": "ca-controller-roles", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:37Z" - } - ], - "name": "ca-controller-roles", - "resourceVersion": "60786655", - "uid": "3f00accb-c624-4e94-9cfd-40feae054fdd" - }, - "rules": [ - { - "apiGroups": [ - "*" - ], - "resources": [ - "*" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-controller-role-binding\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-controller-role-binding\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"ca-controller-roles\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"ca-controller-service-account\",\"namespace\":\"cyberarmor-system\"}]}\n" - }, - "creationTimestamp": "2021-10-12T00:18:37Z", - "labels": { - "app": "ca-controller-role-binding", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:37Z" - } - ], - "name": "ca-controller-role-binding", - "resourceVersion": "60786656", - "uid": "cfba68fb-640f-48da-937f-280051340148" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "ca-controller-roles" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "ca-controller-service-account", - "namespace": "cyberarmor-system" - } - ] - } - ], - "externalObjects": { - "subject": [ - { - "kind": "ServiceAccount", - "name": "ca-controller-service-account", - "namespace": "cyberarmor-system" - } - ] - } - } - }, - { - "alertMessage": "the following Group: system:masters, can exec into containers", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "cluster-admin", - "resourceVersion": "42", - "uid": "dd8cbb89-6ebd-4010-94a7-ef54d64078ec" - }, - "rules": [ - { - "apiGroups": [ - "*" - ], - "resources": [ - "*" - ], - "verbs": [ - "*" - ] - }, - { - "nonResourceURLs": [ - "*" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "cluster-admin", - "resourceVersion": "100", - "uid": "767593c3-9a03-487f-9feb-0ce68bcb7cb7" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "cluster-admin" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Group", - "name": "system:masters" - } - ] - } - ], - "externalObjects": { - "subject": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Group", - "name": "system:masters" - } - ] - } - } - }, - { - "alertMessage": "the following ServiceAccount: olm-operator-serviceaccount, can exec into containers", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:45:58Z", - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:rules": {} - }, - "manager": "px", - "operation": "Update", - "time": "2021-08-12T11:45:58Z" - } - ], - "name": "system:controller:operator-lifecycle-manager", - "resourceVersion": "31981650", - "uid": "d453b876-674d-4aeb-a6d6-bf405e034eb1" - }, - "rules": [ - { - "apiGroups": [ - "*" - ], - "resources": [ - "*" - ], - "verbs": [ - "*" - ] - }, - { - "nonResourceURLs": [ - "*" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "creationTimestamp": "2021-08-31T19:47:18Z", - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "px", - "operation": "Update", - "time": "2021-08-31T19:47:18Z" - } - ], - "name": "olm-operator-cluster-binding-olm", - "resourceVersion": "41268496", - "uid": "ee936583-82fd-44ad-a4a1-3b2c4ccdfca5" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:operator-lifecycle-manager" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "olm-operator-serviceaccount", - "namespace": "olm" - } - ] - } - ], - "externalObjects": { - "subject": [ - { - "kind": "ServiceAccount", - "name": "olm-operator-serviceaccount", - "namespace": "olm" - } - ] - } - } - }, - { - "alertMessage": "the following ServiceAccount: olm-operator-serviceaccount, can exec into containers", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:45:58Z", - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:rules": {} - }, - "manager": "px", - "operation": "Update", - "time": "2021-08-12T11:45:58Z" - } - ], - "name": "system:controller:operator-lifecycle-manager", - "resourceVersion": "31981650", - "uid": "d453b876-674d-4aeb-a6d6-bf405e034eb1" - }, - "rules": [ - { - "apiGroups": [ - "*" - ], - "resources": [ - "*" - ], - "verbs": [ - "*" - ] - }, - { - "nonResourceURLs": [ - "*" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "creationTimestamp": "2021-08-12T11:45:59Z", - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "px", - "operation": "Update", - "time": "2021-08-12T11:45:58Z" - } - ], - "name": "olm-operator-binding-olm", - "resourceVersion": "31981653", - "uid": "785e5e62-2730-4cb4-aea1-7d070f715b4b" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:operator-lifecycle-manager" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "olm-operator-serviceaccount", - "namespace": "olm" - } - ] - } - ], - "externalObjects": { - "subject": [ - { - "kind": "ServiceAccount", - "name": "olm-operator-serviceaccount", - "namespace": "olm" - } - ] - } - } - } - ], - "listInputResources": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "Role", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:bootstrap-signer", - "namespace": "kube-public", - "resourceVersion": "139", - "uid": "2e994ff2-5b52-4363-b798-7de1d99ba7c5" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resourceNames": [ - "cluster-info" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "Role", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"kubernetes.io/deprecation\":\"cloud-provider role is DEPRECATED in the concern of potential collisions and will be removed in 1.16. Do not use this role.\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"cloud-provider\",\"namespace\":\"kube-system\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\"],\"verbs\":[\"create\",\"get\",\"patch\",\"update\",\"list\",\"watch\"]}]}\n", - "kubernetes.io/deprecation": "cloud-provider role is DEPRECATED in the concern of potential collisions and will be removed in 1.16. Do not use this role." - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {}, - "f:kubernetes.io/deprecation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "cloud-provider", - "namespace": "kube-system", - "resourceVersion": "595", - "uid": "24d94597-f68c-46ce-818f-59ba5747e511" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "create", - "get", - "patch", - "update", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "Role", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "extension-apiserver-authentication-reader", - "namespace": "kube-system", - "resourceVersion": "140", - "uid": "ae96d736-b532-49c4-acab-791ab5e41e3c" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resourceNames": [ - "extension-apiserver-authentication" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "Role", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"gce:cloud-provider\",\"namespace\":\"kube-system\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\"],\"verbs\":[\"create\",\"get\",\"patch\",\"update\",\"list\",\"watch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "gce:cloud-provider", - "namespace": "kube-system", - "resourceVersion": "593", - "uid": "e9a82559-98a2-4a8d-a109-dd3a93358398" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "create", - "get", - "patch", - "update", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "Role", - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-leaderelection\",\"namespace\":\"kube-system\"},\"rules\":[{\"apiGroups\":[\"coordination.k8s.io\"],\"resources\":[\"leases\"],\"verbs\":[\"get\",\"watch\",\"list\",\"delete\",\"update\",\"create\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-leaderelection", - "namespace": "kube-system", - "resourceVersion": "477", - "uid": "76762703-cd72-445b-b0f9-ec5092dea5f2" - }, - "rules": [ - { - "apiGroups": [ - "coordination.k8s.io" - ], - "resources": [ - "leases" - ], - "verbs": [ - "get", - "watch", - "list", - "delete", - "update", - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "Role", - "metadata": { - "annotations": { - "components.gke.io/component-name": "snapshot-controller", - "components.gke.io/component-version": "0.5.5", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"snapshot-controller\",\"components.gke.io/component-version\":\"0.5.5\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"snapshot-controller-leaderelection\",\"namespace\":\"kube-system\"},\"rules\":[{\"apiGroups\":[\"coordination.k8s.io\"],\"resources\":[\"leases\"],\"verbs\":[\"get\",\"watch\",\"list\",\"delete\",\"update\",\"create\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/layer": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:42Z" - } - ], - "name": "snapshot-controller-leaderelection", - "namespace": "kube-system", - "resourceVersion": "41911916", - "uid": "fbe86365-fcf5-4fb6-85cf-e80c36778142" - }, - "rules": [ - { - "apiGroups": [ - "coordination.k8s.io" - ], - "resources": [ - "leases" - ], - "verbs": [ - "get", - "watch", - "list", - "delete", - "update", - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "Role", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system::leader-locking-kube-controller-manager", - "namespace": "kube-system", - "resourceVersion": "144", - "uid": "841cd76c-388f-4f35-bd22-d4917fe0a5a5" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resourceNames": [ - "kube-controller-manager" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "get", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "Role", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system::leader-locking-kube-scheduler", - "namespace": "kube-system", - "resourceVersion": "145", - "uid": "f3e088e0-b13b-416e-abcb-93b497c7920d" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resourceNames": [ - "kube-scheduler" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "get", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "Role", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:bootstrap-signer", - "namespace": "kube-system", - "resourceVersion": "141", - "uid": "dadcb66c-d736-4eaa-b951-93ffb138938e" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "secrets" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "Role", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:cloud-provider", - "namespace": "kube-system", - "resourceVersion": "142", - "uid": "2cb6ddd2-3896-4720-a3c3-9f0050e3bec2" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "create", - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "Role", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:controller:glbc\",\"namespace\":\"kube-system\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\",\"create\",\"patch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:30Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:30Z" - } - ], - "name": "system:controller:glbc", - "namespace": "kube-system", - "resourceVersion": "606", - "uid": "5438c4ff-a5fa-4542-b751-3624f036d977" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "get", - "list", - "watch", - "update", - "create", - "patch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "Role", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:token-cleaner", - "namespace": "kube-system", - "resourceVersion": "143", - "uid": "ea7085cb-6095-432b-a8d3-e0300005d92e" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "secrets" - ], - "verbs": [ - "delete", - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "aggregationRule": { - "clusterRoleSelectors": [ - { - "matchLabels": { - "rbac.authorization.k8s.io/aggregate-to-admin": "true" - } - } - ] - }, - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:aggregationRule": { - ".": {}, - "f:clusterRoleSelectors": {} - }, - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - } - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:rules": {} - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:15Z" - } - ], - "name": "admin", - "resourceVersion": "31982306", - "uid": "da9dd224-4007-41c9-8234-4abe65b7bd14" - }, - "rules": [ - { - "apiGroups": [ - "operators.coreos.com" - ], - "resources": [ - "subscriptions" - ], - "verbs": [ - "create", - "update", - "patch", - "delete" - ] - }, - { - "apiGroups": [ - "operators.coreos.com" - ], - "resources": [ - "clusterserviceversions", - "catalogsources", - "installplans", - "subscriptions" - ], - "verbs": [ - "delete" - ] - }, - { - "apiGroups": [ - "operators.coreos.com" - ], - "resources": [ - "clusterserviceversions", - "catalogsources", - "installplans", - "subscriptions", - "operatorgroups" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "packages.operators.coreos.com" - ], - "resources": [ - "packagemanifests", - "packagemanifests/icon" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods/attach", - "pods/exec", - "pods/portforward", - "pods/proxy", - "secrets", - "services/proxy" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "serviceaccounts" - ], - "verbs": [ - "impersonate" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods", - "pods/attach", - "pods/exec", - "pods/portforward", - "pods/proxy" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps", - "endpoints", - "persistentvolumeclaims", - "replicationcontrollers", - "replicationcontrollers/scale", - "secrets", - "serviceaccounts", - "services", - "services/proxy" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "daemonsets", - "deployments", - "deployments/rollback", - "deployments/scale", - "replicasets", - "replicasets/scale", - "statefulsets", - "statefulsets/scale" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "autoscaling" - ], - "resources": [ - "horizontalpodautoscalers" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "cronjobs", - "jobs" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "extensions" - ], - "resources": [ - "daemonsets", - "deployments", - "deployments/rollback", - "deployments/scale", - "ingresses", - "networkpolicies", - "replicasets", - "replicasets/scale", - "replicationcontrollers/scale" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "policy" - ], - "resources": [ - "poddisruptionbudgets" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "networking.k8s.io" - ], - "resources": [ - "ingresses", - "networkpolicies" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps", - "endpoints", - "persistentvolumeclaims", - "persistentvolumeclaims/status", - "pods", - "replicationcontrollers", - "replicationcontrollers/scale", - "serviceaccounts", - "services", - "services/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "bindings", - "events", - "limitranges", - "namespaces/status", - "pods/log", - "pods/status", - "replicationcontrollers/status", - "resourcequotas", - "resourcequotas/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "namespaces" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "controllerrevisions", - "daemonsets", - "daemonsets/status", - "deployments", - "deployments/scale", - "deployments/status", - "replicasets", - "replicasets/scale", - "replicasets/status", - "statefulsets", - "statefulsets/scale", - "statefulsets/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "autoscaling" - ], - "resources": [ - "horizontalpodautoscalers", - "horizontalpodautoscalers/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "cronjobs", - "cronjobs/status", - "jobs", - "jobs/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "extensions" - ], - "resources": [ - "daemonsets", - "daemonsets/status", - "deployments", - "deployments/scale", - "deployments/status", - "ingresses", - "ingresses/status", - "networkpolicies", - "replicasets", - "replicasets/scale", - "replicasets/status", - "replicationcontrollers/scale" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "policy" - ], - "resources": [ - "poddisruptionbudgets", - "poddisruptionbudgets/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "networking.k8s.io" - ], - "resources": [ - "ingresses", - "ingresses/status", - "networkpolicies" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apiextensions.k8s.io" - ], - "resourceNames": [ - "viziers.px.dev" - ], - "resources": [ - "customresourcedefinitions" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "px.dev" - ], - "resources": [ - "viziers" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "px.dev" - ], - "resources": [ - "viziers" - ], - "verbs": [ - "create", - "update", - "patch", - "delete" - ] - }, - { - "apiGroups": [ - "authorization.k8s.io" - ], - "resources": [ - "localsubjectaccessreviews" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "rbac.authorization.k8s.io" - ], - "resources": [ - "rolebindings", - "roles" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "get", - "list", - "patch", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "px.dev" - ], - "resources": [ - "viziers" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:45:59Z", - "labels": { - "rbac.authorization.k8s.io/aggregate-to-admin": "true", - "rbac.authorization.k8s.io/aggregate-to-edit": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:rbac.authorization.k8s.io/aggregate-to-admin": {}, - "f:rbac.authorization.k8s.io/aggregate-to-edit": {} - } - }, - "f:rules": {} - }, - "manager": "px", - "operation": "Update", - "time": "2021-08-12T11:45:59Z" - } - ], - "name": "aggregate-olm-edit", - "resourceVersion": "31981659", - "uid": "90e90468-8b0b-4461-b45e-ba7d6186d727" - }, - "rules": [ - { - "apiGroups": [ - "operators.coreos.com" - ], - "resources": [ - "subscriptions" - ], - "verbs": [ - "create", - "update", - "patch", - "delete" - ] - }, - { - "apiGroups": [ - "operators.coreos.com" - ], - "resources": [ - "clusterserviceversions", - "catalogsources", - "installplans", - "subscriptions" - ], - "verbs": [ - "delete" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:45:59Z", - "labels": { - "rbac.authorization.k8s.io/aggregate-to-admin": "true", - "rbac.authorization.k8s.io/aggregate-to-edit": "true", - "rbac.authorization.k8s.io/aggregate-to-view": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:rbac.authorization.k8s.io/aggregate-to-admin": {}, - "f:rbac.authorization.k8s.io/aggregate-to-edit": {}, - "f:rbac.authorization.k8s.io/aggregate-to-view": {} - } - }, - "f:rules": {} - }, - "manager": "px", - "operation": "Update", - "time": "2021-08-12T11:45:59Z" - } - ], - "name": "aggregate-olm-view", - "resourceVersion": "31981661", - "uid": "ff48047f-24f2-4cab-be38-0b2d4f51edb3" - }, - "rules": [ - { - "apiGroups": [ - "operators.coreos.com" - ], - "resources": [ - "clusterserviceversions", - "catalogsources", - "installplans", - "subscriptions", - "operatorgroups" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "packages.operators.coreos.com" - ], - "resources": [ - "packagemanifests", - "packagemanifests/icon" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-controller-roles\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-controller-roles\"},\"rules\":[{\"apiGroups\":[\"*\"],\"resources\":[\"*\"],\"verbs\":[\"*\"]}]}\n" - }, - "creationTimestamp": "2021-10-12T00:18:37Z", - "labels": { - "app": "ca-controller-roles", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:37Z" - } - ], - "name": "ca-controller-roles", - "resourceVersion": "60786655", - "uid": "3f00accb-c624-4e94-9cfd-40feae054fdd" - }, - "rules": [ - { - "apiGroups": [ - "*" - ], - "resources": [ - "*" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"kubernetes.io/deprecation\":\"cloud-provider clusterrole is DEPRECATED in the concern of potential collisions and will be removed in 1.16. Do not use this role.\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"cloud-provider\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"create\",\"patch\",\"update\"]}]}\n", - "kubernetes.io/deprecation": "cloud-provider clusterrole is DEPRECATED in the concern of potential collisions and will be removed in 1.16. Do not use this role." - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {}, - "f:kubernetes.io/deprecation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "cloud-provider", - "resourceVersion": "597", - "uid": "590ac0f5-b83c-49b2-9389-99af6c1cf9c3" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "cluster-admin", - "resourceVersion": "42", - "uid": "dd8cbb89-6ebd-4010-94a7-ef54d64078ec" - }, - "rules": [ - { - "apiGroups": [ - "*" - ], - "resources": [ - "*" - ], - "verbs": [ - "*" - ] - }, - { - "nonResourceURLs": [ - "*" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "aggregationRule": { - "clusterRoleSelectors": [ - { - "matchLabels": { - "rbac.authorization.k8s.io/aggregate-to-edit": "true" - } - } - ] - }, - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults", - "rbac.authorization.k8s.io/aggregate-to-admin": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:aggregationRule": { - ".": {}, - "f:clusterRoleSelectors": {} - }, - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {}, - "f:rbac.authorization.k8s.io/aggregate-to-admin": {} - } - } - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:rules": {} - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:15Z" - } - ], - "name": "edit", - "resourceVersion": "31982305", - "uid": "a4bb4ea2-a82a-42e9-a952-a796ebdb0025" - }, - "rules": [ - { - "apiGroups": [ - "operators.coreos.com" - ], - "resources": [ - "subscriptions" - ], - "verbs": [ - "create", - "update", - "patch", - "delete" - ] - }, - { - "apiGroups": [ - "operators.coreos.com" - ], - "resources": [ - "clusterserviceversions", - "catalogsources", - "installplans", - "subscriptions" - ], - "verbs": [ - "delete" - ] - }, - { - "apiGroups": [ - "operators.coreos.com" - ], - "resources": [ - "clusterserviceversions", - "catalogsources", - "installplans", - "subscriptions", - "operatorgroups" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "packages.operators.coreos.com" - ], - "resources": [ - "packagemanifests", - "packagemanifests/icon" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods/attach", - "pods/exec", - "pods/portforward", - "pods/proxy", - "secrets", - "services/proxy" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "serviceaccounts" - ], - "verbs": [ - "impersonate" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods", - "pods/attach", - "pods/exec", - "pods/portforward", - "pods/proxy" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps", - "endpoints", - "persistentvolumeclaims", - "replicationcontrollers", - "replicationcontrollers/scale", - "secrets", - "serviceaccounts", - "services", - "services/proxy" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "daemonsets", - "deployments", - "deployments/rollback", - "deployments/scale", - "replicasets", - "replicasets/scale", - "statefulsets", - "statefulsets/scale" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "autoscaling" - ], - "resources": [ - "horizontalpodautoscalers" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "cronjobs", - "jobs" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "extensions" - ], - "resources": [ - "daemonsets", - "deployments", - "deployments/rollback", - "deployments/scale", - "ingresses", - "networkpolicies", - "replicasets", - "replicasets/scale", - "replicationcontrollers/scale" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "policy" - ], - "resources": [ - "poddisruptionbudgets" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "networking.k8s.io" - ], - "resources": [ - "ingresses", - "networkpolicies" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps", - "endpoints", - "persistentvolumeclaims", - "persistentvolumeclaims/status", - "pods", - "replicationcontrollers", - "replicationcontrollers/scale", - "serviceaccounts", - "services", - "services/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "bindings", - "events", - "limitranges", - "namespaces/status", - "pods/log", - "pods/status", - "replicationcontrollers/status", - "resourcequotas", - "resourcequotas/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "namespaces" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "controllerrevisions", - "daemonsets", - "daemonsets/status", - "deployments", - "deployments/scale", - "deployments/status", - "replicasets", - "replicasets/scale", - "replicasets/status", - "statefulsets", - "statefulsets/scale", - "statefulsets/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "autoscaling" - ], - "resources": [ - "horizontalpodautoscalers", - "horizontalpodautoscalers/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "cronjobs", - "cronjobs/status", - "jobs", - "jobs/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "extensions" - ], - "resources": [ - "daemonsets", - "daemonsets/status", - "deployments", - "deployments/scale", - "deployments/status", - "ingresses", - "ingresses/status", - "networkpolicies", - "replicasets", - "replicasets/scale", - "replicasets/status", - "replicationcontrollers/scale" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "policy" - ], - "resources": [ - "poddisruptionbudgets", - "poddisruptionbudgets/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "networking.k8s.io" - ], - "resources": [ - "ingresses", - "ingresses/status", - "networkpolicies" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apiextensions.k8s.io" - ], - "resourceNames": [ - "viziers.px.dev" - ], - "resources": [ - "customresourcedefinitions" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "px.dev" - ], - "resources": [ - "viziers" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "px.dev" - ], - "resources": [ - "viziers" - ], - "verbs": [ - "create", - "update", - "patch", - "delete" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"external-metrics-reader\"},\"rules\":[{\"apiGroups\":[\"external.metrics.k8s.io\"],\"resources\":[\"*\"],\"verbs\":[\"list\",\"get\",\"watch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "external-metrics-reader", - "resourceVersion": "575", - "uid": "fcf3c188-6c04-41ed-8668-6d7f1c6f5ccd" - }, - "rules": [ - { - "apiGroups": [ - "external.metrics.k8s.io" - ], - "resources": [ - "*" - ], - "verbs": [ - "list", - "get", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"gce:beta:kubelet-certificate-bootstrap\"},\"rules\":[{\"apiGroups\":[\"certificates.k8s.io\"],\"resources\":[\"certificatesigningrequests/nodeclient\"],\"verbs\":[\"create\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:30Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:30Z" - } - ], - "name": "gce:beta:kubelet-certificate-bootstrap", - "resourceVersion": "616", - "uid": "83892374-36c5-4fdc-a783-8bfdeda7a98a" - }, - "rules": [ - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resources": [ - "certificatesigningrequests/nodeclient" - ], - "verbs": [ - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"gce:beta:kubelet-certificate-rotation\"},\"rules\":[{\"apiGroups\":[\"certificates.k8s.io\"],\"resources\":[\"certificatesigningrequests/selfnodeclient\",\"certificatesigningrequests/selfnodeserver\"],\"verbs\":[\"create\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:30Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:30Z" - } - ], - "name": "gce:beta:kubelet-certificate-rotation", - "resourceVersion": "617", - "uid": "23944c05-810f-4d87-8213-467c7a86135f" - }, - "rules": [ - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resources": [ - "certificatesigningrequests/selfnodeclient", - "certificatesigningrequests/selfnodeserver" - ], - "verbs": [ - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"gce:cloud-provider\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"create\",\"patch\",\"update\"]},{\"apiGroups\":[\"\"],\"resources\":[\"services/status\"],\"verbs\":[\"patch\",\"update\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "gce:cloud-provider", - "resourceVersion": "594", - "uid": "469e657b-7953-4c15-b301-8761394d3ee0" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "services/status" - ], - "verbs": [ - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"gke-metrics-agent\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"nodes\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"pods\"],\"verbs\":[\"list\",\"watch\"]},{\"apiGroups\":[\"policy\"],\"resourceNames\":[\"gce.gke-metrics-agent\"],\"resources\":[\"podsecuritypolicies\"],\"verbs\":[\"use\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - } - ], - "name": "gke-metrics-agent", - "resourceVersion": "437", - "uid": "7833f6d5-6bcd-45a4-bfb3-40f62793511b" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "policy" - ], - "resourceNames": [ - "gce.gke-metrics-agent" - ], - "resources": [ - "podsecuritypolicies" - ], - "verbs": [ - "use" - ] - } - ] - }, - { - "aggregationRule": { - "clusterRoleSelectors": [ - { - "matchLabels": { - "olm.opgroup.permissions/aggregate-to-c287d32d82d2c74d-admin": "true" - } - } - ] - }, - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:46:09Z", - "labels": { - "olm.owner": "global-operators", - "olm.owner.kind": "OperatorGroup", - "olm.owner.namespace": "px-operator" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:rules": {} - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-08-31T19:48:24Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:aggregationRule": { - ".": {}, - "f:clusterRoleSelectors": {} - }, - "f:metadata": { - "f:labels": { - ".": {}, - "f:olm.owner": {}, - "f:olm.owner.kind": {}, - "f:olm.owner.namespace": {} - } - } - }, - "manager": "olm", - "operation": "Update", - "time": "2021-08-31T19:48:24Z" - } - ], - "name": "global-operators-admin", - "resourceVersion": "41269000", - "uid": "2390b0ae-4fbd-4238-99d5-d2f05d8bb37e" - }, - "rules": [ - { - "apiGroups": [ - "px.dev" - ], - "resources": [ - "viziers" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "aggregationRule": { - "clusterRoleSelectors": [ - { - "matchLabels": { - "olm.opgroup.permissions/aggregate-to-c287d32d82d2c74d-edit": "true" - } - } - ] - }, - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:46:09Z", - "labels": { - "olm.owner": "global-operators", - "olm.owner.kind": "OperatorGroup", - "olm.owner.namespace": "px-operator" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:rules": {} - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-08-31T19:48:24Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:aggregationRule": { - ".": {}, - "f:clusterRoleSelectors": {} - }, - "f:metadata": { - "f:labels": { - ".": {}, - "f:olm.owner": {}, - "f:olm.owner.kind": {}, - "f:olm.owner.namespace": {} - } - } - }, - "manager": "olm", - "operation": "Update", - "time": "2021-08-31T19:48:24Z" - } - ], - "name": "global-operators-edit", - "resourceVersion": "41269001", - "uid": "320745be-224b-4e41-99ff-25bcf8f2288e" - }, - "rules": [ - { - "apiGroups": [ - "px.dev" - ], - "resources": [ - "viziers" - ], - "verbs": [ - "create", - "update", - "patch", - "delete" - ] - } - ] - }, - { - "aggregationRule": { - "clusterRoleSelectors": [ - { - "matchLabels": { - "olm.opgroup.permissions/aggregate-to-c287d32d82d2c74d-view": "true" - } - } - ] - }, - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:46:09Z", - "labels": { - "olm.owner": "global-operators", - "olm.owner.kind": "OperatorGroup", - "olm.owner.namespace": "px-operator" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:rules": {} - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-08-31T19:48:24Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:aggregationRule": { - ".": {}, - "f:clusterRoleSelectors": {} - }, - "f:metadata": { - "f:labels": { - ".": {}, - "f:olm.owner": {}, - "f:olm.owner.kind": {}, - "f:olm.owner.namespace": {} - } - } - }, - "manager": "olm", - "operation": "Update", - "time": "2021-08-31T19:48:24Z" - } - ], - "name": "global-operators-view", - "resourceVersion": "41268999", - "uid": "be3a73f5-c287-4f2b-bbd0-7804ba7e02f3" - }, - "rules": [ - { - "apiGroups": [ - "apiextensions.k8s.io" - ], - "resourceNames": [ - "viziers.px.dev" - ], - "resources": [ - "customresourcedefinitions" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "px.dev" - ], - "resources": [ - "viziers" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"hipster-secret-access\"},\"name\":\"hipster-secret-access\"},\"rules\":[{\"apiGroups\":[\"*\"],\"resources\":[\"secrets\"],\"verbs\":[\"get\",\"list\",\"watch\"]}]}\n" - }, - "creationTimestamp": "2021-07-04T18:22:52Z", - "labels": { - "app": "hipster-secret-access" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-04T18:22:52Z" - } - ], - "name": "hipster-secret-access", - "resourceVersion": "11500881", - "uid": "f8922ad4-c689-449d-a948-d5abaafa1117" - }, - "rules": [ - { - "apiGroups": [ - "*" - ], - "resources": [ - "secrets" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"kubelet-api-admin\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"nodes/proxy\",\"nodes/log\",\"nodes/stats\",\"nodes/metrics\",\"nodes/spec\"],\"verbs\":[\"*\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:30Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:30Z" - } - ], - "name": "kubelet-api-admin", - "resourceVersion": "613", - "uid": "969f4113-8386-4baa-8538-c8289444862d" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes/proxy", - "nodes/log", - "nodes/stats", - "nodes/metrics", - "nodes/spec" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:46:09Z", - "labels": { - "olm.owner": "olm-operators", - "olm.owner.kind": "OperatorGroup", - "olm.owner.namespace": "olm" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:olm.owner": {}, - "f:olm.owner.kind": {}, - "f:olm.owner.namespace": {} - } - } - }, - "manager": "olm", - "operation": "Update", - "time": "2021-08-12T11:46:09Z" - } - ], - "name": "olm-operators-admin", - "resourceVersion": "31981760", - "uid": "fbcf5956-8286-4351-9c93-537ac28ed9bd" - }, - "rules": null - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:46:09Z", - "labels": { - "olm.owner": "olm-operators", - "olm.owner.kind": "OperatorGroup", - "olm.owner.namespace": "olm" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:olm.owner": {}, - "f:olm.owner.kind": {}, - "f:olm.owner.namespace": {} - } - } - }, - "manager": "olm", - "operation": "Update", - "time": "2021-08-12T11:46:09Z" - } - ], - "name": "olm-operators-edit", - "resourceVersion": "31981762", - "uid": "d3570124-0686-4b35-ba93-77907d69edcb" - }, - "rules": null - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:46:09Z", - "labels": { - "olm.owner": "olm-operators", - "olm.owner.kind": "OperatorGroup", - "olm.owner.namespace": "olm" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:olm.owner": {}, - "f:olm.owner.kind": {}, - "f:olm.owner.namespace": {} - } - } - }, - "manager": "olm", - "operation": "Update", - "time": "2021-08-12T11:46:09Z" - } - ], - "name": "olm-operators-view", - "resourceVersion": "31981764", - "uid": "4c321fd2-a92e-4273-97ad-55f052c31517" - }, - "rules": null - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-attacher-role\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"persistentvolumes\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\",\"patch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"nodes\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"storage.k8s.io\"],\"resources\":[\"csinodes\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"storage.k8s.io\"],\"resources\":[\"volumeattachments\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\",\"patch\"]},{\"apiGroups\":[\"storage.k8s.io\"],\"resources\":[\"volumeattachments/status\"],\"verbs\":[\"patch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-attacher-role", - "resourceVersion": "468", - "uid": "61478a13-618e-4496-b146-d421830c2896" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumes" - ], - "verbs": [ - "get", - "list", - "watch", - "update", - "patch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "csinodes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "volumeattachments" - ], - "verbs": [ - "get", - "list", - "watch", - "update", - "patch" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "volumeattachments/status" - ], - "verbs": [ - "patch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-provisioner-role\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"persistentvolumes\"],\"verbs\":[\"get\",\"list\",\"watch\",\"create\",\"delete\"]},{\"apiGroups\":[\"\"],\"resources\":[\"persistentvolumeclaims\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\"]},{\"apiGroups\":[\"storage.k8s.io\"],\"resources\":[\"storageclasses\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"list\",\"watch\",\"create\",\"update\",\"patch\"]},{\"apiGroups\":[\"storage.k8s.io\"],\"resources\":[\"csinodes\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"nodes\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"snapshot.storage.k8s.io\"],\"resources\":[\"volumesnapshots\"],\"verbs\":[\"get\",\"list\"]},{\"apiGroups\":[\"snapshot.storage.k8s.io\"],\"resources\":[\"volumesnapshotcontents\"],\"verbs\":[\"get\",\"list\"]},{\"apiGroups\":[\"storage.k8s.io\"],\"resources\":[\"volumeattachments\"],\"verbs\":[\"get\",\"list\",\"watch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-provisioner-role", - "resourceVersion": "470", - "uid": "4e141227-259f-4e7e-a134-51b8793eecd3" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumes" - ], - "verbs": [ - "get", - "list", - "watch", - "create", - "delete" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims" - ], - "verbs": [ - "get", - "list", - "watch", - "update" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "storageclasses" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "list", - "watch", - "create", - "update", - "patch" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "csinodes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "snapshot.storage.k8s.io" - ], - "resources": [ - "volumesnapshots" - ], - "verbs": [ - "get", - "list" - ] - }, - { - "apiGroups": [ - "snapshot.storage.k8s.io" - ], - "resources": [ - "volumesnapshotcontents" - ], - "verbs": [ - "get", - "list" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "volumeattachments" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-resizer-role\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"persistentvolumes\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\",\"patch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"persistentvolumeclaims\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"persistentvolumeclaims/status\"],\"verbs\":[\"update\",\"patch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"list\",\"watch\",\"create\",\"update\",\"patch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-resizer-role", - "resourceVersion": "471", - "uid": "1ec6ffdd-f0da-458a-8094-2a80b5e08232" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumes" - ], - "verbs": [ - "get", - "list", - "watch", - "update", - "patch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims/status" - ], - "verbs": [ - "update", - "patch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "list", - "watch", - "create", - "update", - "patch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-snapshotter-role\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"list\",\"watch\",\"create\",\"update\",\"patch\"]},{\"apiGroups\":[\"snapshot.storage.k8s.io\"],\"resources\":[\"volumesnapshotclasses\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"snapshot.storage.k8s.io\"],\"resources\":[\"volumesnapshotcontents\"],\"verbs\":[\"create\",\"get\",\"list\",\"watch\",\"update\",\"delete\",\"patch\"]},{\"apiGroups\":[\"snapshot.storage.k8s.io\"],\"resources\":[\"volumesnapshotcontents/status\"],\"verbs\":[\"update\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-snapshotter-role", - "resourceVersion": "472", - "uid": "23f705d1-3e65-47f9-bdb7-35e6f4d573df" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "list", - "watch", - "create", - "update", - "patch" - ] - }, - { - "apiGroups": [ - "snapshot.storage.k8s.io" - ], - "resources": [ - "volumesnapshotclasses" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "snapshot.storage.k8s.io" - ], - "resources": [ - "volumesnapshotcontents" - ], - "verbs": [ - "create", - "get", - "list", - "watch", - "update", - "delete", - "patch" - ] - }, - { - "apiGroups": [ - "snapshot.storage.k8s.io" - ], - "resources": [ - "volumesnapshotcontents/status" - ], - "verbs": [ - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-31T19:48:24Z", - "labels": { - "olm.owner": "pixie-operator.v0.0.7", - "olm.owner.kind": "ClusterServiceVersion", - "olm.owner.namespace": "px-operator", - "operators.coreos.com/pixie-operator.px-operator": "" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:olm.owner": {}, - "f:olm.owner.kind": {}, - "f:olm.owner.namespace": {}, - "f:operators.coreos.com/pixie-operator.px-operator": {} - } - }, - "f:rules": {} - }, - "manager": "olm", - "operation": "Update", - "time": "2021-08-31T19:48:25Z" - } - ], - "name": "pixie-operator.v0.0.7-pixie-operator-service-account-7d476f658d", - "resourceVersion": "41269057", - "uid": "c91d48da-607b-4a8f-acf6-3208f67c75a3" - }, - "rules": [ - { - "apiGroups": [ - "", - "apps", - "rbac.authorization.k8s.io", - "extensions", - "etcd.database.coreos.com", - "batch", - "nats.io", - "policy", - "apiextensions.k8s.io", - "px.dev" - ], - "resources": [ - "clusterroles", - "clusterrolebindings", - "configmaps", - "customresourcedefinitions", - "secrets", - "pods", - "services", - "deployments", - "daemonsets", - "persistentvolumes", - "persistentvolumeclaims", - "roles", - "rolebindings", - "serviceaccounts", - "etcdclusters.etcd.database.coreos.com", - "etcdclusters", - "statefulsets", - "cronjobs", - "jobs", - "natsclusters", - "podsecuritypolicies", - "viziers", - "viziers/status" - ], - "verbs": [ - "*" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "storageclasses" - ], - "verbs": [ - "get", - "list" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "namespaces" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "updateinfo-crd", - "components.gke.io/component-version": "1.1.0", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"updateinfo-crd\",\"components.gke.io/component-version\":\"1.1.0\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"read-updateinfo\"},\"rules\":[{\"apiGroups\":[\"nodemanagement.gke.io\"],\"resources\":[\"updateinfos\"],\"verbs\":[\"get\",\"list\",\"watch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:42Z" - } - ], - "name": "read-updateinfo", - "resourceVersion": "25934521", - "uid": "83e2c41a-10cb-4972-ba29-5e429266d028" - }, - "rules": [ - { - "apiGroups": [ - "nodemanagement.gke.io" - ], - "resources": [ - "updateinfos" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "snapshot-controller", - "components.gke.io/component-version": "0.5.5", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"snapshot-controller\",\"components.gke.io/component-version\":\"0.5.5\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"snapshot-controller-runner\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"persistentvolumes\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"persistentvolumeclaims\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\"]},{\"apiGroups\":[\"storage.k8s.io\"],\"resources\":[\"storageclasses\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"list\",\"watch\",\"create\",\"update\",\"patch\"]},{\"apiGroups\":[\"snapshot.storage.k8s.io\"],\"resources\":[\"volumesnapshotclasses\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"snapshot.storage.k8s.io\"],\"resources\":[\"volumesnapshotcontents\"],\"verbs\":[\"create\",\"get\",\"list\",\"watch\",\"update\",\"delete\"]},{\"apiGroups\":[\"snapshot.storage.k8s.io\"],\"resources\":[\"volumesnapshots\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\"]},{\"apiGroups\":[\"snapshot.storage.k8s.io\"],\"resources\":[\"volumesnapshots/status\"],\"verbs\":[\"update\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/layer": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:42Z" - } - ], - "name": "snapshot-controller-runner", - "resourceVersion": "41911914", - "uid": "b2034bb2-a11f-4cf0-b950-d461bda73ac2" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims" - ], - "verbs": [ - "get", - "list", - "watch", - "update" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "storageclasses" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "list", - "watch", - "create", - "update", - "patch" - ] - }, - { - "apiGroups": [ - "snapshot.storage.k8s.io" - ], - "resources": [ - "volumesnapshotclasses" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "snapshot.storage.k8s.io" - ], - "resources": [ - "volumesnapshotcontents" - ], - "verbs": [ - "create", - "get", - "list", - "watch", - "update", - "delete" - ] - }, - { - "apiGroups": [ - "snapshot.storage.k8s.io" - ], - "resources": [ - "volumesnapshots" - ], - "verbs": [ - "get", - "list", - "watch", - "update" - ] - }, - { - "apiGroups": [ - "snapshot.storage.k8s.io" - ], - "resources": [ - "volumesnapshots/status" - ], - "verbs": [ - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"stackdriver:metadata-agent\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"endpoints\",\"namespaces\",\"nodes\",\"pods\",\"replicationcontrollers\",\"services\"],\"verbs\":[\"watch\",\"get\",\"list\"]},{\"apiGroups\":[\"apps\"],\"resources\":[\"daemonsets\",\"deployments\",\"replicasets\",\"statefulsets\"],\"verbs\":[\"watch\",\"get\",\"list\"]},{\"apiGroups\":[\"batch\"],\"resources\":[\"cronjobs\",\"jobs\"],\"verbs\":[\"watch\",\"get\",\"list\"]},{\"apiGroups\":[\"extensions\"],\"resources\":[\"ingresses\"],\"verbs\":[\"watch\",\"get\",\"list\"]},{\"apiGroups\":[\"apps\",\"extensions\"],\"resources\":[\"deployments\"],\"verbs\":[\"get\",\"update\"]},{\"nonResourceURLs\":[\"/metrics\"],\"verbs\":[\"get\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - } - ], - "name": "stackdriver:metadata-agent", - "resourceVersion": "373", - "uid": "cf9c350a-2866-43d1-9263-5b9d0bf14a0f" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints", - "namespaces", - "nodes", - "pods", - "replicationcontrollers", - "services" - ], - "verbs": [ - "watch", - "get", - "list" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "daemonsets", - "deployments", - "replicasets", - "statefulsets" - ], - "verbs": [ - "watch", - "get", - "list" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "cronjobs", - "jobs" - ], - "verbs": [ - "watch", - "get", - "list" - ] - }, - { - "apiGroups": [ - "extensions" - ], - "resources": [ - "ingresses" - ], - "verbs": [ - "watch", - "get", - "list" - ] - }, - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "deployments" - ], - "verbs": [ - "get", - "update" - ] - }, - { - "nonResourceURLs": [ - "/metrics" - ], - "verbs": [ - "get" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "storageversionmigrator-rbac", - "components.gke.io/component-version": "0.0.3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"storageversionmigrator-rbac\",\"components.gke.io/component-version\":\"0.0.3\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"storage-version-migration-crd-creator\"},\"rules\":[{\"apiGroups\":[\"apiextensions.k8s.io\"],\"resources\":[\"customresourcedefinitions\"],\"verbs\":[\"create\",\"delete\",\"get\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - } - ], - "name": "storage-version-migration-crd-creator", - "resourceVersion": "556", - "uid": "ae3208a2-88ea-4a33-8fb1-14d056344b68" - }, - "rules": [ - { - "apiGroups": [ - "apiextensions.k8s.io" - ], - "resources": [ - "customresourcedefinitions" - ], - "verbs": [ - "create", - "delete", - "get" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "storageversionmigrator-rbac", - "components.gke.io/component-version": "0.0.3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"storageversionmigrator-rbac\",\"components.gke.io/component-version\":\"0.0.3\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"storage-version-migration-initializer\"},\"rules\":[{\"apiGroups\":[\"migration.k8s.io\"],\"resources\":[\"storageversionmigrations\"],\"verbs\":[\"create\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - } - ], - "name": "storage-version-migration-initializer", - "resourceVersion": "557", - "uid": "890dd546-2e67-455c-a9f3-2c6fac8395de" - }, - "rules": [ - { - "apiGroups": [ - "migration.k8s.io" - ], - "resources": [ - "storageversionmigrations" - ], - "verbs": [ - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "storageversionmigrator-rbac", - "components.gke.io/component-version": "0.0.3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"storageversionmigrator-rbac\",\"components.gke.io/component-version\":\"0.0.3\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"storage-version-migration-trigger\"},\"rules\":[{\"apiGroups\":[\"migration.k8s.io\"],\"resources\":[\"storagestates\"],\"verbs\":[\"watch\",\"get\",\"list\",\"delete\",\"create\",\"update\"]},{\"apiGroups\":[\"migration.k8s.io\"],\"resources\":[\"storageversionmigrations\"],\"verbs\":[\"watch\",\"get\",\"list\",\"delete\",\"create\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - } - ], - "name": "storage-version-migration-trigger", - "resourceVersion": "551", - "uid": "39d36bae-f488-4b1e-b044-08b5c83f74f9" - }, - "rules": [ - { - "apiGroups": [ - "migration.k8s.io" - ], - "resources": [ - "storagestates" - ], - "verbs": [ - "watch", - "get", - "list", - "delete", - "create", - "update" - ] - }, - { - "apiGroups": [ - "migration.k8s.io" - ], - "resources": [ - "storageversionmigrations" - ], - "verbs": [ - "watch", - "get", - "list", - "delete", - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults", - "rbac.authorization.k8s.io/aggregate-to-admin": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {}, - "f:rbac.authorization.k8s.io/aggregate-to-admin": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:aggregate-to-admin", - "resourceVersion": "49", - "uid": "169ed642-018e-4389-be66-9918b47e0d7c" - }, - "rules": [ - { - "apiGroups": [ - "authorization.k8s.io" - ], - "resources": [ - "localsubjectaccessreviews" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "rbac.authorization.k8s.io" - ], - "resources": [ - "rolebindings", - "roles" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "get", - "list", - "patch", - "update", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults", - "rbac.authorization.k8s.io/aggregate-to-edit": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {}, - "f:rbac.authorization.k8s.io/aggregate-to-edit": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:aggregate-to-edit", - "resourceVersion": "50", - "uid": "a0e4aedb-b681-4803-aac8-6bf5d33bc2c1" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "pods/attach", - "pods/exec", - "pods/portforward", - "pods/proxy", - "secrets", - "services/proxy" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "serviceaccounts" - ], - "verbs": [ - "impersonate" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods", - "pods/attach", - "pods/exec", - "pods/portforward", - "pods/proxy" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps", - "endpoints", - "persistentvolumeclaims", - "replicationcontrollers", - "replicationcontrollers/scale", - "secrets", - "serviceaccounts", - "services", - "services/proxy" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "daemonsets", - "deployments", - "deployments/rollback", - "deployments/scale", - "replicasets", - "replicasets/scale", - "statefulsets", - "statefulsets/scale" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "autoscaling" - ], - "resources": [ - "horizontalpodautoscalers" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "cronjobs", - "jobs" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "extensions" - ], - "resources": [ - "daemonsets", - "deployments", - "deployments/rollback", - "deployments/scale", - "ingresses", - "networkpolicies", - "replicasets", - "replicasets/scale", - "replicationcontrollers/scale" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "policy" - ], - "resources": [ - "poddisruptionbudgets" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "networking.k8s.io" - ], - "resources": [ - "ingresses", - "networkpolicies" - ], - "verbs": [ - "create", - "delete", - "deletecollection", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults", - "rbac.authorization.k8s.io/aggregate-to-view": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {}, - "f:rbac.authorization.k8s.io/aggregate-to-view": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:aggregate-to-view", - "resourceVersion": "51", - "uid": "0dfce890-f1b2-47f5-a5d8-629146f434c8" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps", - "endpoints", - "persistentvolumeclaims", - "persistentvolumeclaims/status", - "pods", - "replicationcontrollers", - "replicationcontrollers/scale", - "serviceaccounts", - "services", - "services/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "bindings", - "events", - "limitranges", - "namespaces/status", - "pods/log", - "pods/status", - "replicationcontrollers/status", - "resourcequotas", - "resourcequotas/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "namespaces" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "controllerrevisions", - "daemonsets", - "daemonsets/status", - "deployments", - "deployments/scale", - "deployments/status", - "replicasets", - "replicasets/scale", - "replicasets/status", - "statefulsets", - "statefulsets/scale", - "statefulsets/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "autoscaling" - ], - "resources": [ - "horizontalpodautoscalers", - "horizontalpodautoscalers/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "cronjobs", - "cronjobs/status", - "jobs", - "jobs/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "extensions" - ], - "resources": [ - "daemonsets", - "daemonsets/status", - "deployments", - "deployments/scale", - "deployments/status", - "ingresses", - "ingresses/status", - "networkpolicies", - "replicasets", - "replicasets/scale", - "replicasets/status", - "replicationcontrollers/scale" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "policy" - ], - "resources": [ - "poddisruptionbudgets", - "poddisruptionbudgets/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "networking.k8s.io" - ], - "resources": [ - "ingresses", - "ingresses/status", - "networkpolicies" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:auth-delegator", - "resourceVersion": "57", - "uid": "4ad7bb40-6cc4-4de7-9f10-456ba732ebc5" - }, - "rules": [ - { - "apiGroups": [ - "authentication.k8s.io" - ], - "resources": [ - "tokenreviews" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "authorization.k8s.io" - ], - "resources": [ - "subjectaccessreviews" - ], - "verbs": [ - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:basic-user", - "resourceVersion": "44", - "uid": "9fe3f9ff-35ed-463c-84c8-67f2a9222da1" - }, - "rules": [ - { - "apiGroups": [ - "authorization.k8s.io" - ], - "resources": [ - "selfsubjectaccessreviews", - "selfsubjectrulesreviews" - ], - "verbs": [ - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:certificates.k8s.io:certificatesigningrequests:nodeclient", - "resourceVersion": "62", - "uid": "47539291-53a5-4529-b90a-0015cdfa7624" - }, - "rules": [ - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resources": [ - "certificatesigningrequests/nodeclient" - ], - "verbs": [ - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:certificates.k8s.io:certificatesigningrequests:selfnodeclient", - "resourceVersion": "63", - "uid": "c8fd5608-5ae9-48af-81f2-533b4cbd65ad" - }, - "rules": [ - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resources": [ - "certificatesigningrequests/selfnodeclient" - ], - "verbs": [ - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:certificates.k8s.io:kube-apiserver-client-approver", - "resourceVersion": "67", - "uid": "b0e1c915-747c-4503-80e7-bc16efc7e678" - }, - "rules": [ - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resourceNames": [ - "kubernetes.io/kube-apiserver-client" - ], - "resources": [ - "signers" - ], - "verbs": [ - "approve" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:certificates.k8s.io:kube-apiserver-client-kubelet-approver", - "resourceVersion": "68", - "uid": "d6d6f17f-83f3-40fb-8c97-55da89d300ba" - }, - "rules": [ - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resourceNames": [ - "kubernetes.io/kube-apiserver-client-kubelet" - ], - "resources": [ - "signers" - ], - "verbs": [ - "approve" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:certificates.k8s.io:kubelet-serving-approver", - "resourceVersion": "66", - "uid": "fd066614-6a60-4d30-978b-971aa86a6533" - }, - "rules": [ - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resourceNames": [ - "kubernetes.io/kubelet-serving" - ], - "resources": [ - "signers" - ], - "verbs": [ - "approve" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:certificates.k8s.io:legacy-unknown-approver", - "resourceVersion": "65", - "uid": "6d850555-ec42-4322-bdfe-f8cac77ab75c" - }, - "rules": [ - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resourceNames": [ - "kubernetes.io/legacy-unknown" - ], - "resources": [ - "signers" - ], - "verbs": [ - "approve" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "clustermetrics-rbac", - "components.gke.io/component-version": "1.4.0", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"clustermetrics-rbac\",\"components.gke.io/component-version\":\"1.4.0\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:clustermetrics\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"componentstatuses\",\"namespaces\",\"nodes\",\"pods\",\"resourcequotas\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\",\"events\"],\"verbs\":[\"create\",\"get\",\"update\"]},{\"apiGroups\":[\"admissionregistration.k8s.io\"],\"resources\":[\"mutatingwebhookconfigurations\"],\"verbs\":[\"list\",\"watch\"]},{\"apiGroups\":[\"apps\"],\"resources\":[\"deployments\",\"replicasets\",\"statefulsets\",\"daemonsets\"],\"verbs\":[\"list\",\"watch\"]},{\"apiGroups\":[\"batch\"],\"resources\":[\"jobs\"],\"verbs\":[\"list\",\"watch\"]},{\"apiGroups\":[\"policy\"],\"resources\":[\"poddisruptionbudgets\"],\"verbs\":[\"list\",\"watch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - } - ], - "name": "system:clustermetrics", - "resourceVersion": "427", - "uid": "0d904ac3-ce06-431d-aec8-3b0a9616557e" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "componentstatuses", - "namespaces", - "nodes", - "pods", - "resourcequotas" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps", - "events" - ], - "verbs": [ - "create", - "get", - "update" - ] - }, - { - "apiGroups": [ - "admissionregistration.k8s.io" - ], - "resources": [ - "mutatingwebhookconfigurations" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "deployments", - "replicasets", - "statefulsets", - "daemonsets" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "jobs" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "policy" - ], - "resources": [ - "poddisruptionbudgets" - ], - "verbs": [ - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:attachdetach-controller", - "resourceVersion": "71", - "uid": "7575d209-e789-4fbf-9ea3-81425ccda5a7" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims", - "persistentvolumes" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes/status" - ], - "verbs": [ - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "volumeattachments" - ], - "verbs": [ - "create", - "delete", - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "csidrivers" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "csinodes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:certificate-controller", - "resourceVersion": "96", - "uid": "f58f190b-1293-4e46-a5b1-57a1b449dd47" - }, - "rules": [ - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resources": [ - "certificatesigningrequests" - ], - "verbs": [ - "delete", - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resources": [ - "certificatesigningrequests/approval", - "certificatesigningrequests/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resourceNames": [ - "kubernetes.io/kube-apiserver-client-kubelet" - ], - "resources": [ - "signers" - ], - "verbs": [ - "approve" - ] - }, - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resourceNames": [ - "kubernetes.io/kube-apiserver-client", - "kubernetes.io/kube-apiserver-client-kubelet", - "kubernetes.io/kubelet-serving", - "kubernetes.io/legacy-unknown" - ], - "resources": [ - "signers" - ], - "verbs": [ - "sign" - ] - }, - { - "apiGroups": [ - "authorization.k8s.io" - ], - "resources": [ - "subjectaccessreviews" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:clusterrole-aggregation-controller", - "resourceVersion": "72", - "uid": "a6b291ad-102f-4399-a5aa-e0b3dfa3f7b1" - }, - "rules": [ - { - "apiGroups": [ - "rbac.authorization.k8s.io" - ], - "resources": [ - "clusterroles" - ], - "verbs": [ - "escalate", - "get", - "list", - "patch", - "update", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:cronjob-controller", - "resourceVersion": "73", - "uid": "86547cb3-b7f3-4220-af09-a43ec6edafaf" - }, - "rules": [ - { - "apiGroups": [ - "batch" - ], - "resources": [ - "cronjobs" - ], - "verbs": [ - "get", - "list", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "jobs" - ], - "verbs": [ - "create", - "delete", - "get", - "list", - "patch", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "cronjobs/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "cronjobs/finalizers" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "delete", - "list" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:daemon-set-controller", - "resourceVersion": "74", - "uid": "2ea5db01-f697-4eb1-b602-0840b3416993" - }, - "rules": [ - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "daemonsets" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "daemonsets/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "daemonsets/finalizers" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "create", - "delete", - "list", - "patch", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods/binding" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "controllerrevisions" - ], - "verbs": [ - "create", - "delete", - "get", - "list", - "patch", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:deployment-controller", - "resourceVersion": "75", - "uid": "78160b29-c586-4742-8bdd-fe0bd8a6e6c3" - }, - "rules": [ - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "deployments" - ], - "verbs": [ - "get", - "list", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "deployments/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "deployments/finalizers" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "replicasets" - ], - "verbs": [ - "create", - "delete", - "get", - "list", - "patch", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "get", - "list", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:disruption-controller", - "resourceVersion": "76", - "uid": "f6f2f2bf-4c39-4999-a143-591790249c4d" - }, - "rules": [ - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "deployments" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "replicasets" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "replicationcontrollers" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "policy" - ], - "resources": [ - "poddisruptionbudgets" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "statefulsets" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "policy" - ], - "resources": [ - "poddisruptionbudgets/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "*" - ], - "resources": [ - "*/scale" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:endpoint-controller", - "resourceVersion": "77", - "uid": "937ceca8-241f-428e-a36b-b6ec70e73595" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "pods", - "services" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints" - ], - "verbs": [ - "create", - "delete", - "get", - "list", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints/restricted" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:endpointslice-controller", - "resourceVersion": "78", - "uid": "580d7354-48b5-4f84-a6cb-7ce688c638fb" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes", - "pods", - "services" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "services/finalizers" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "discovery.k8s.io" - ], - "resources": [ - "endpointslices" - ], - "verbs": [ - "create", - "delete", - "get", - "list", - "update" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:endpointslicemirroring-controller", - "resourceVersion": "79", - "uid": "467b8703-d272-4632-953c-ee58a307a188" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints", - "services" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "services/finalizers" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints/finalizers" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "discovery.k8s.io" - ], - "resources": [ - "endpointslices" - ], - "verbs": [ - "create", - "delete", - "get", - "list", - "update" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:expand-controller", - "resourceVersion": "80", - "uid": "0676f02d-9955-4ef6-8c44-a36d950ce6ef" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumes" - ], - "verbs": [ - "get", - "list", - "patch", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims/status" - ], - "verbs": [ - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "storageclasses" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints", - "services" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "secrets" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:generic-garbage-collector", - "resourceVersion": "81", - "uid": "b51b85f6-5278-4e9a-854f-6543afc43c74" - }, - "rules": [ - { - "apiGroups": [ - "*" - ], - "resources": [ - "*" - ], - "verbs": [ - "delete", - "get", - "list", - "patch", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:controller:glbc\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"secrets\"],\"verbs\":[\"get\"]},{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\",\"create\",\"patch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"endpoints\",\"services\",\"pods\",\"nodes\",\"namespaces\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"services\"],\"verbs\":[\"update\",\"patch\"]},{\"apiGroups\":[\"extensions\",\"networking.k8s.io\"],\"resources\":[\"ingresses\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"extensions\",\"networking.k8s.io\"],\"resources\":[\"ingresses\"],\"verbs\":[\"update\"]},{\"apiGroups\":[\"extensions\",\"networking.k8s.io\"],\"resources\":[\"ingresses/status\"],\"verbs\":[\"update\",\"patch\"]},{\"apiGroups\":[\"apiextensions.k8s.io\"],\"resources\":[\"customresourcedefinitions\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\",\"create\",\"patch\"]},{\"apiGroups\":[\"cloud.google.com\"],\"resources\":[\"backendconfigs\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\",\"create\",\"patch\"]},{\"apiGroups\":[\"networking.gke.io\"],\"resources\":[\"servicenetworkendpointgroups\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\",\"create\",\"patch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:30Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:30Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:44Z" - } - ], - "name": "system:controller:glbc", - "resourceVersion": "25934535", - "uid": "c8b6cbc3-da27-4484-8851-f23e15d7650b" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "secrets" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "get", - "list", - "watch", - "update", - "create", - "patch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints", - "services", - "pods", - "nodes", - "namespaces" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "services" - ], - "verbs": [ - "update", - "patch" - ] - }, - { - "apiGroups": [ - "extensions", - "networking.k8s.io" - ], - "resources": [ - "ingresses" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "extensions", - "networking.k8s.io" - ], - "resources": [ - "ingresses" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "extensions", - "networking.k8s.io" - ], - "resources": [ - "ingresses/status" - ], - "verbs": [ - "update", - "patch" - ] - }, - { - "apiGroups": [ - "apiextensions.k8s.io" - ], - "resources": [ - "customresourcedefinitions" - ], - "verbs": [ - "get", - "list", - "watch", - "update", - "create", - "patch" - ] - }, - { - "apiGroups": [ - "cloud.google.com" - ], - "resources": [ - "backendconfigs" - ], - "verbs": [ - "get", - "list", - "watch", - "update", - "create", - "patch" - ] - }, - { - "apiGroups": [ - "networking.gke.io" - ], - "resources": [ - "servicenetworkendpointgroups" - ], - "verbs": [ - "get", - "list", - "watch", - "update", - "create", - "patch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:horizontal-pod-autoscaler", - "resourceVersion": "82", - "uid": "c76bd102-86b5-48c2-b429-c2e9e57b7d3d" - }, - "rules": [ - { - "apiGroups": [ - "autoscaling" - ], - "resources": [ - "horizontalpodautoscalers" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "autoscaling" - ], - "resources": [ - "horizontalpodautoscalers/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "*" - ], - "resources": [ - "*/scale" - ], - "verbs": [ - "get", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "list" - ] - }, - { - "apiGroups": [ - "" - ], - "resourceNames": [ - "http:heapster:", - "https:heapster:" - ], - "resources": [ - "services/proxy" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "metrics.k8s.io" - ], - "resources": [ - "pods" - ], - "verbs": [ - "list" - ] - }, - { - "apiGroups": [ - "custom.metrics.k8s.io" - ], - "resources": [ - "*" - ], - "verbs": [ - "get", - "list" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:job-controller", - "resourceVersion": "83", - "uid": "ce553aff-8a69-4027-8f08-6fef21224438" - }, - "rules": [ - { - "apiGroups": [ - "batch" - ], - "resources": [ - "jobs" - ], - "verbs": [ - "get", - "list", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "jobs/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "jobs/finalizers" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "create", - "delete", - "list", - "patch", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:namespace-controller", - "resourceVersion": "84", - "uid": "05a00528-e192-4d28-9c1f-09f0800af07c" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "namespaces" - ], - "verbs": [ - "delete", - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "namespaces/finalize", - "namespaces/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "*" - ], - "resources": [ - "*" - ], - "verbs": [ - "delete", - "deletecollection", - "get", - "list" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:node-controller", - "resourceVersion": "85", - "uid": "4dacbe78-5da1-4149-8dfb-762b001586ac" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "delete", - "get", - "list", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes/status" - ], - "verbs": [ - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "delete", - "list" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:45:58Z", - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:rules": {} - }, - "manager": "px", - "operation": "Update", - "time": "2021-08-12T11:45:58Z" - } - ], - "name": "system:controller:operator-lifecycle-manager", - "resourceVersion": "31981650", - "uid": "d453b876-674d-4aeb-a6d6-bf405e034eb1" - }, - "rules": [ - { - "apiGroups": [ - "*" - ], - "resources": [ - "*" - ], - "verbs": [ - "*" - ] - }, - { - "nonResourceURLs": [ - "*" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:persistent-volume-binder", - "resourceVersion": "86", - "uid": "d1d622e5-9996-4329-bbb2-11151d62a117" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumes" - ], - "verbs": [ - "create", - "delete", - "get", - "list", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumes/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims" - ], - "verbs": [ - "get", - "list", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "create", - "delete", - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "storageclasses" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints" - ], - "verbs": [ - "create", - "delete", - "get", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "services" - ], - "verbs": [ - "create", - "delete", - "get" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "secrets" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "get", - "list" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:pod-garbage-collector", - "resourceVersion": "87", - "uid": "d6d925a4-8080-459d-a7b2-91c72c84a444" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "delete", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "get", - "list" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:pv-protection-controller", - "resourceVersion": "98", - "uid": "93c92f57-e230-4bbe-8204-93f180a3015a" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumes" - ], - "verbs": [ - "get", - "list", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:pvc-protection-controller", - "resourceVersion": "97", - "uid": "5da62629-69a3-4a19-8eab-eaea3d976cd1" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims" - ], - "verbs": [ - "get", - "list", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:replicaset-controller", - "resourceVersion": "88", - "uid": "5ce13afb-4379-4af9-8bb6-108cd96b12f0" - }, - "rules": [ - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "replicasets" - ], - "verbs": [ - "get", - "list", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "replicasets/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "replicasets/finalizers" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "create", - "delete", - "list", - "patch", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:replication-controller", - "resourceVersion": "89", - "uid": "cf9d79e4-9c98-4cd9-8648-784ea3cf30c2" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "replicationcontrollers" - ], - "verbs": [ - "get", - "list", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "replicationcontrollers/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "replicationcontrollers/finalizers" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "create", - "delete", - "list", - "patch", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:resourcequota-controller", - "resourceVersion": "90", - "uid": "c3ea02a8-a072-4306-af2a-d23335ae063b" - }, - "rules": [ - { - "apiGroups": [ - "*" - ], - "resources": [ - "*" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "resourcequotas/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:root-ca-cert-publisher", - "resourceVersion": "99", - "uid": "83757e72-f917-4d3f-9c83-7a16c77fff09" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "create", - "update" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:route-controller", - "resourceVersion": "91", - "uid": "4858d998-e7cf-43ee-931d-e927c6c27ba0" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes/status" - ], - "verbs": [ - "patch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:service-account-controller", - "resourceVersion": "92", - "uid": "a8d35400-a4b1-4d02-bf6e-c51ae75a4fe0" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "serviceaccounts" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:service-controller", - "resourceVersion": "93", - "uid": "f865dc76-7e7c-4ef9-9e6d-eec1bde24bf6" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "services" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "services/status" - ], - "verbs": [ - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:statefulset-controller", - "resourceVersion": "94", - "uid": "946fa715-e2e9-41a1-8d3b-afa5905a634b" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "statefulsets" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "statefulsets/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "statefulsets/finalizers" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "create", - "delete", - "get", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "controllerrevisions" - ], - "verbs": [ - "create", - "delete", - "get", - "list", - "patch", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims" - ], - "verbs": [ - "create", - "get" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:controller:ttl-controller", - "resourceVersion": "95", - "uid": "2a56250f-a9f4-4ba8-a98d-664a0241fb99" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "list", - "patch", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:discovery", - "resourceVersion": "43", - "uid": "2861547b-045a-4d68-bf54-aa0797878def" - }, - "rules": [ - { - "nonResourceURLs": [ - "/api", - "/api/*", - "/apis", - "/apis/*", - "/healthz", - "/livez", - "/openapi", - "/openapi/*", - "/readyz", - "/version", - "/version/" - ], - "verbs": [ - "get" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "gcp-controller-manager-combined", - "components.gke.io/component-version": "2.1.10", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"gcp-controller-manager-combined\",\"components.gke.io/component-version\":\"2.1.10\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gcp-controller-manager\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"serviceaccounts\",\"pods\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"nodes\",\"endpoints\",\"configmaps\"],\"verbs\":[\"*\"]},{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"create\"]},{\"apiGroups\":[\"certificates.k8s.io\"],\"resources\":[\"certificatesigningrequests\",\"certificatesigningrequests/approval\",\"certificatesigningrequests/status\"],\"verbs\":[\"*\"]},{\"apiGroups\":[\"certificates.k8s.io\"],\"resourceNames\":[\"kubernetes.io/kube-apiserver-client\",\"kubernetes.io/kube-apiserver-client-kubelet\",\"kubernetes.io/kubelet-serving\",\"kubernetes.io/legacy-unknown\"],\"resources\":[\"signers\"],\"verbs\":[\"approve\",\"sign\"]},{\"apiGroups\":[\"authorization.k8s.io\"],\"resources\":[\"subjectaccessreviews\"],\"verbs\":[\"create\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/layer": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "system:gcp-controller-manager", - "resourceVersion": "41911909", - "uid": "6ef77c4a-e28e-49da-a781-ce989095c3ec" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "serviceaccounts", - "pods" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes", - "endpoints", - "configmaps" - ], - "verbs": [ - "*" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resources": [ - "certificatesigningrequests", - "certificatesigningrequests/approval", - "certificatesigningrequests/status" - ], - "verbs": [ - "*" - ] - }, - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resourceNames": [ - "kubernetes.io/kube-apiserver-client", - "kubernetes.io/kube-apiserver-client-kubelet", - "kubernetes.io/kubelet-serving", - "kubernetes.io/legacy-unknown" - ], - "resources": [ - "signers" - ], - "verbs": [ - "approve", - "sign" - ] - }, - { - "apiGroups": [ - "authorization.k8s.io" - ], - "resources": [ - "subjectaccessreviews" - ], - "verbs": [ - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "gke-common-webhooks-rbac", - "components.gke.io/component-version": "1.1.2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"gke-common-webhooks-rbac\",\"components.gke.io/component-version\":\"1.1.2\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-common-webhooks\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"pods\",\"nodes\",\"configmaps\",\"services\",\"ingress\",\"endpoint\"],\"verbs\":[\"*\"]},{\"apiGroups\":[\"admissionregistration.k8s.io\"],\"resources\":[\"mutatingwebhookconfigurations\",\"validatingwebhookconfigurations\"],\"verbs\":[\"*\"]},{\"apiGroups\":[\"flowcontrol.apiserver.k8s.io\"],\"resources\":[\"prioritylevelconfigurations\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"create\"]},{\"apiGroups\":[\"auto.gke.io\"],\"resources\":[\"allowlistedworkloads\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"apiextensions.k8s.io\"],\"resources\":[\"customresourcedefinitions\"],\"verbs\":[\"delete\"]},{\"apiGroups\":[\"templates.gatekeeper.sh\"],\"resources\":[\"constrainttemplates\"],\"verbs\":[\"delete\"]},{\"apiGroups\":[\"\"],\"resources\":[\"namespaces\"],\"verbs\":[\"list\",\"get\",\"watch\",\"update\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "system:gke-common-webhooks", - "resourceVersion": "46217990", - "uid": "cb2dbdf0-6f30-4cbf-bcbb-d994db12d957" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "pods", - "nodes", - "configmaps", - "services", - "ingress", - "endpoint" - ], - "verbs": [ - "*" - ] - }, - { - "apiGroups": [ - "admissionregistration.k8s.io" - ], - "resources": [ - "mutatingwebhookconfigurations", - "validatingwebhookconfigurations" - ], - "verbs": [ - "*" - ] - }, - { - "apiGroups": [ - "flowcontrol.apiserver.k8s.io" - ], - "resources": [ - "prioritylevelconfigurations" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "auto.gke.io" - ], - "resources": [ - "allowlistedworkloads" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apiextensions.k8s.io" - ], - "resources": [ - "customresourcedefinitions" - ], - "verbs": [ - "delete" - ] - }, - { - "apiGroups": [ - "templates.gatekeeper.sh" - ], - "resources": [ - "constrainttemplates" - ], - "verbs": [ - "delete" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "namespaces" - ], - "verbs": [ - "list", - "get", - "watch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-controller\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"endpoints\"],\"verbs\":[\"create\"]},{\"apiGroups\":[\"\"],\"resourceNames\":[\"vpa-recommender\"],\"resources\":[\"endpoints\"],\"verbs\":[\"get\",\"update\",\"patch\",\"delete\"]},{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\",\"events\"],\"verbs\":[\"get\",\"list\",\"watch\",\"create\",\"update\",\"patch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - } - ], - "name": "system:gke-controller", - "resourceVersion": "568", - "uid": "52b5cbd9-0c70-4d5a-b4f1-f5e55f3e5fd7" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "" - ], - "resourceNames": [ - "vpa-recommender" - ], - "resources": [ - "endpoints" - ], - "verbs": [ - "get", - "update", - "patch", - "delete" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps", - "events" - ], - "verbs": [ - "get", - "list", - "watch", - "create", - "update", - "patch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-hpa-actor\"},\"rules\":[{\"apiGroups\":[\"autoscaling\"],\"resources\":[\"horizontalpodautoscalers\"],\"verbs\":[\"list\",\"get\",\"watch\"]},{\"apiGroups\":[\"autoscaling\"],\"resources\":[\"horizontalpodautoscalers/status\"],\"verbs\":[\"update\"]},{\"apiGroups\":[\"*\"],\"resources\":[\"*/scale\"],\"verbs\":[\"get\",\"update\"]},{\"apiGroups\":[\"metrics.k8s.io\",\"v1\",\"\"],\"resources\":[\"pods\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"custom.metrics.k8s.io\"],\"resources\":[\"*\"],\"verbs\":[\"list\",\"get\",\"watch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - } - ], - "name": "system:gke-hpa-actor", - "resourceVersion": "571", - "uid": "ae2d0c9a-e463-44d2-b744-a666b8228b67" - }, - "rules": [ - { - "apiGroups": [ - "autoscaling" - ], - "resources": [ - "horizontalpodautoscalers" - ], - "verbs": [ - "list", - "get", - "watch" - ] - }, - { - "apiGroups": [ - "autoscaling" - ], - "resources": [ - "horizontalpodautoscalers/status" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "*" - ], - "resources": [ - "*/scale" - ], - "verbs": [ - "get", - "update" - ] - }, - { - "apiGroups": [ - "metrics.k8s.io", - "v1", - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "custom.metrics.k8s.io" - ], - "resources": [ - "*" - ], - "verbs": [ - "list", - "get", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-hpa-service-reader\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"services\"],\"verbs\":[\"get\",\"list\",\"watch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "system:gke-hpa-service-reader", - "resourceVersion": "577", - "uid": "a708b7e6-c69e-4a5a-b6a4-e9d6fe3693bd" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "services" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "gke-master-healthcheck-rbac", - "components.gke.io/component-version": "1.0.2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"gke-master-healthcheck-rbac\",\"components.gke.io/component-version\":\"1.0.2\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-master-healthcheck\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"componentstatuses\"],\"verbs\":[\"get\",\"watch\",\"list\"]},{\"nonResourceURLs\":[\"/readyz\"],\"verbs\":[\"get\"]}]}\n" - }, - "creationTimestamp": "2021-07-30T14:54:41Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "system:gke-master-healthcheck", - "resourceVersion": "25934490", - "uid": "9ec32c7b-bcbb-4b76-9ed0-46374bd73dd3" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "componentstatuses" - ], - "verbs": [ - "get", - "watch", - "list" - ] - }, - { - "nonResourceURLs": [ - "/readyz" - ], - "verbs": [ - "get" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-version": "resourcequota-rbac-1.0.1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-version\":\"resourcequota-rbac-1.0.1\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-master-resourcequota\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"namespaces\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"resourcequotas\"],\"verbs\":[\"*\"]},{\"apiGroups\":[\"apiextensions.k8s.io\"],\"resources\":[\"customresourcedefinitions\"],\"verbs\":[\"*\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "system:gke-master-resourcequota", - "resourceVersion": "489", - "uid": "a8daea2f-3e4d-49e6-b7d0-22bb00b52e52" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "namespaces" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "resourcequotas" - ], - "verbs": [ - "*" - ] - }, - { - "apiGroups": [ - "apiextensions.k8s.io" - ], - "resources": [ - "customresourcedefinitions" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-uas-collection-reader\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"replicationcontrollers\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"apps\"],\"resources\":[\"daemonsets\",\"deployments\",\"replicasets\",\"statefulsets\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"batch\"],\"resources\":[\"jobs\",\"cronjobs\"],\"verbs\":[\"get\",\"list\",\"watch\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "system:gke-uas-collection-reader", - "resourceVersion": "580", - "uid": "86e27972-2e2b-433a-a802-892a20556b87" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "replicationcontrollers" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "daemonsets", - "deployments", - "replicasets", - "statefulsets" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "jobs", - "cronjobs" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-uas-metrics-reader\"},\"rules\":[{\"apiGroups\":[\"metrics.k8s.io\"],\"resources\":[\"pods\"],\"verbs\":[\"get\",\"list\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "system:gke-uas-metrics-reader", - "resourceVersion": "579", - "uid": "236300be-32eb-48aa-ab1b-9ea1f0d12671" - }, - "rules": [ - { - "apiGroups": [ - "metrics.k8s.io" - ], - "resources": [ - "pods" - ], - "verbs": [ - "get", - "list" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "l7-lb-controller-rbac", - "components.gke.io/component-version": "1.0.9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"l7-lb-controller-rbac\",\"components.gke.io/component-version\":\"1.0.9\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:glbc-status\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"pods/status\",\"services/status\",\"services\"],\"verbs\":[\"*\"]},{\"apiGroups\":[\"\"],\"resources\":[\"secrets\"],\"verbs\":[\"get\"]},{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\",\"create\",\"patch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"nodes\",\"namespaces\",\"endpoints\",\"pods\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"networking.gke.io\"],\"resources\":[\"managedcertificates\",\"frontendconfigs\",\"servicenetworkendpointgroups\",\"gcpingressparams\"],\"verbs\":[\"*\"]},{\"apiGroups\":[\"networking.k8s.io\"],\"resources\":[\"ingresses/status\",\"ingressclasses\",\"ingresses\"],\"verbs\":[\"*\"]},{\"apiGroups\":[\"\",\"extensions\"],\"resources\":[\"configmaps\",\"endpoints\",\"events\",\"ingresses\",\"ingresses/status\"],\"verbs\":[\"*\"]},{\"apiGroups\":[\"apiextensions.k8s.io\"],\"resources\":[\"customresourcedefinitions\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\",\"create\",\"patch\"]},{\"apiGroups\":[\"cloud.google.com\"],\"resources\":[\"backendconfigs\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\",\"create\",\"patch\"]},{\"apiGroups\":[\"networking.istio.io\"],\"resources\":[\"destinationrules\"],\"verbs\":[\"*\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "system:glbc-status", - "resourceVersion": "25934492", - "uid": "0f89f5f7-7245-4626-91d9-f30d218ae487" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "pods/status", - "services/status", - "services" - ], - "verbs": [ - "*" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "secrets" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "get", - "list", - "watch", - "update", - "create", - "patch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes", - "namespaces", - "endpoints", - "pods" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "networking.gke.io" - ], - "resources": [ - "managedcertificates", - "frontendconfigs", - "servicenetworkendpointgroups", - "gcpingressparams" - ], - "verbs": [ - "*" - ] - }, - { - "apiGroups": [ - "networking.k8s.io" - ], - "resources": [ - "ingresses/status", - "ingressclasses", - "ingresses" - ], - "verbs": [ - "*" - ] - }, - { - "apiGroups": [ - "", - "extensions" - ], - "resources": [ - "configmaps", - "endpoints", - "events", - "ingresses", - "ingresses/status" - ], - "verbs": [ - "*" - ] - }, - { - "apiGroups": [ - "apiextensions.k8s.io" - ], - "resources": [ - "customresourcedefinitions" - ], - "verbs": [ - "get", - "list", - "watch", - "update", - "create", - "patch" - ] - }, - { - "apiGroups": [ - "cloud.google.com" - ], - "resources": [ - "backendconfigs" - ], - "verbs": [ - "get", - "list", - "watch", - "update", - "create", - "patch" - ] - }, - { - "apiGroups": [ - "networking.istio.io" - ], - "resources": [ - "destinationrules" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:heapster", - "resourceVersion": "52", - "uid": "c372a148-87c3-4369-bf79-8136907cb4d6" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "events", - "namespaces", - "nodes", - "pods" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "extensions" - ], - "resources": [ - "deployments" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:kube-aggregator", - "resourceVersion": "58", - "uid": "be030e06-d28c-42b2-b12a-9d17c3815ace" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints", - "services" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:kube-controller-manager", - "resourceVersion": "59", - "uid": "a0c6d646-195d-4e7c-9248-5401eb58fe92" - }, - "rules": [ - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "coordination.k8s.io" - ], - "resources": [ - "leases" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "coordination.k8s.io" - ], - "resourceNames": [ - "kube-controller-manager" - ], - "resources": [ - "leases" - ], - "verbs": [ - "get", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "" - ], - "resourceNames": [ - "kube-controller-manager" - ], - "resources": [ - "endpoints" - ], - "verbs": [ - "get", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "secrets", - "serviceaccounts" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "secrets" - ], - "verbs": [ - "delete" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps", - "namespaces", - "secrets", - "serviceaccounts" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "secrets", - "serviceaccounts" - ], - "verbs": [ - "update" - ] - }, - { - "apiGroups": [ - "authentication.k8s.io" - ], - "resources": [ - "tokenreviews" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "authorization.k8s.io" - ], - "resources": [ - "subjectaccessreviews" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "*" - ], - "resources": [ - "*" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "serviceaccounts/token" - ], - "verbs": [ - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:kube-dns", - "resourceVersion": "60", - "uid": "fd57534c-4600-46b1-a43f-49acf290e0c8" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints", - "services" - ], - "verbs": [ - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:kube-dns-autoscaler\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"nodes\"],\"verbs\":[\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"replicationcontrollers/scale\"],\"verbs\":[\"get\",\"update\"]},{\"apiGroups\":[\"apps\"],\"resources\":[\"deployments/scale\",\"replicasets/scale\"],\"verbs\":[\"get\",\"update\"]},{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\"],\"verbs\":[\"get\",\"create\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - } - ], - "name": "system:kube-dns-autoscaler", - "resourceVersion": "424", - "uid": "41dab087-6351-4618-ac78-ea74a81fd185" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "replicationcontrollers/scale" - ], - "verbs": [ - "get", - "update" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "deployments/scale", - "replicasets/scale" - ], - "verbs": [ - "get", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "get", - "create" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:kube-scheduler", - "resourceVersion": "70", - "uid": "6d69b78a-1eec-49f8-843d-701acd834753" - }, - "rules": [ - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "coordination.k8s.io" - ], - "resources": [ - "leases" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "coordination.k8s.io" - ], - "resourceNames": [ - "kube-scheduler" - ], - "resources": [ - "leases" - ], - "verbs": [ - "get", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "" - ], - "resourceNames": [ - "kube-scheduler" - ], - "resources": [ - "endpoints" - ], - "verbs": [ - "get", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "delete", - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "bindings", - "pods/binding" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods/status" - ], - "verbs": [ - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "replicationcontrollers", - "services" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps", - "extensions" - ], - "resources": [ - "replicasets" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "statefulsets" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "policy" - ], - "resources": [ - "poddisruptionbudgets" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims", - "persistentvolumes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "authentication.k8s.io" - ], - "resources": [ - "tokenreviews" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "authorization.k8s.io" - ], - "resources": [ - "subjectaccessreviews" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "csinodes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:kubelet-api-admin", - "resourceVersion": "55", - "uid": "fbe24425-dc44-4555-b61c-d4cbe57a0243" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "proxy" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes/log", - "nodes/metrics", - "nodes/proxy", - "nodes/spec", - "nodes/stats" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-version": "kubestore-collector-rbac-1.0.0", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-version\":\"kubestore-collector-rbac-1.0.0\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:kubestore-collector\"},\"rules\":[{\"apiGroups\":[\"*\"],\"resources\":[\"*\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\",\"events\"],\"verbs\":[\"*\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - } - ], - "name": "system:kubestore-collector", - "resourceVersion": "453", - "uid": "ef38182a-2b80-454a-82de-af39bd2f8a05" - }, - "rules": [ - { - "apiGroups": [ - "*" - ], - "resources": [ - "*" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps", - "events" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-name": "managedcertificates", - "components.gke.io/component-version": "2.1.1", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"managedcertificates\",\"components.gke.io/component-version\":\"2.1.1\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:managed-certificate-controller\"},\"rules\":[{\"apiGroups\":[\"networking.gke.io\"],\"resources\":[\"managedcertificates\"],\"verbs\":[\"*\"]},{\"apiGroups\":[\"networking.k8s.io\"],\"resources\":[\"ingresses\"],\"verbs\":[\"*\"]},{\"apiGroups\":[\"\",\"extensions\"],\"resources\":[\"configmaps\",\"endpoints\",\"events\"],\"verbs\":[\"*\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/layer": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "system:managed-certificate-controller", - "resourceVersion": "25934496", - "uid": "e28936c4-5959-41e5-b9fa-c29a57f38934" - }, - "rules": [ - { - "apiGroups": [ - "networking.gke.io" - ], - "resources": [ - "managedcertificates" - ], - "verbs": [ - "*" - ] - }, - { - "apiGroups": [ - "networking.k8s.io" - ], - "resources": [ - "ingresses" - ], - "verbs": [ - "*" - ] - }, - { - "apiGroups": [ - "", - "extensions" - ], - "resources": [ - "configmaps", - "endpoints", - "events" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:master-monitoring-role\"},\"rules\":[{\"nonResourceURLs\":[\"/metrics\",\"/metrics/*\"],\"verbs\":[\"get\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:29Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-30T14:49:48Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-13T14:29:47Z" - } - ], - "name": "system:master-monitoring-role", - "resourceVersion": "61538089", - "uid": "1d6103b0-0995-45c6-a619-f6e560d20f38" - }, - "rules": [ - { - "nonResourceURLs": [ - "/metrics", - "/metrics/*" - ], - "verbs": [ - "get" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"system:metrics-server\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"pods\",\"nodes\",\"namespaces\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"apps\"],\"resources\":[\"deployments\"],\"verbs\":[\"get\",\"list\",\"update\",\"watch\"]},{\"nonResourceURLs\":[\"/metrics\"],\"verbs\":[\"get\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - } - ], - "name": "system:metrics-server", - "resourceVersion": "406", - "uid": "f97fec54-f218-41ab-9de8-2583000ff519" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "pods", - "nodes", - "namespaces" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "deployments" - ], - "verbs": [ - "get", - "list", - "update", - "watch" - ] - }, - { - "nonResourceURLs": [ - "/metrics" - ], - "verbs": [ - "get" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-07-30T14:54:04Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-07-30T14:54:04Z" - } - ], - "name": "system:monitoring", - "resourceVersion": "25934294", - "uid": "78ab4a8a-9b89-4688-be4e-7f1ac751da81" - }, - "rules": [ - { - "nonResourceURLs": [ - "/healthz", - "/healthz/*", - "/livez", - "/livez/*", - "/metrics", - "/readyz", - "/readyz/*" - ], - "verbs": [ - "get" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:node", - "resourceVersion": "53", - "uid": "80cac46e-2c02-48fe-a6e6-7ec096b9b04e" - }, - "rules": [ - { - "apiGroups": [ - "authentication.k8s.io" - ], - "resources": [ - "tokenreviews" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "authorization.k8s.io" - ], - "resources": [ - "localsubjectaccessreviews", - "subjectaccessreviews" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "services" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "create", - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes/status" - ], - "verbs": [ - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods" - ], - "verbs": [ - "create", - "delete" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods/status" - ], - "verbs": [ - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods/eviction" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps", - "secrets" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims", - "persistentvolumes" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resources": [ - "certificatesigningrequests" - ], - "verbs": [ - "create", - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "coordination.k8s.io" - ], - "resources": [ - "leases" - ], - "verbs": [ - "create", - "delete", - "get", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "volumeattachments" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims/status" - ], - "verbs": [ - "get", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "serviceaccounts/token" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "csidrivers" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "csinodes" - ], - "verbs": [ - "create", - "delete", - "get", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "node.k8s.io" - ], - "resources": [ - "runtimeclasses" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:node-bootstrapper", - "resourceVersion": "56", - "uid": "7af35770-32ad-4ca7-8aa9-50344364e384" - }, - "rules": [ - { - "apiGroups": [ - "certificates.k8s.io" - ], - "resources": [ - "certificatesigningrequests" - ], - "verbs": [ - "create", - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:node-problem-detector", - "resourceVersion": "54", - "uid": "d4110ca5-e7f2-4847-abea-780c84fd7a73" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes/status" - ], - "verbs": [ - "patch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:node-proxier", - "resourceVersion": "69", - "uid": "4d83a4dd-7eb9-44cb-a354-058c1459a78e" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints", - "services" - ], - "verbs": [ - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - }, - { - "apiGroups": [ - "discovery.k8s.io" - ], - "resources": [ - "endpointslices" - ], - "verbs": [ - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:persistent-volume-provisioner", - "resourceVersion": "61", - "uid": "e95e8f8b-12a3-4a83-b330-da573d925278" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumes" - ], - "verbs": [ - "create", - "delete", - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims" - ], - "verbs": [ - "get", - "list", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "storageclasses" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "watch" - ] - }, - { - "apiGroups": [ - "", - "events.k8s.io" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch", - "update" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:public-info-viewer", - "resourceVersion": "45", - "uid": "0161b528-eb9a-42df-aeeb-3da7f19217c1" - }, - "rules": [ - { - "nonResourceURLs": [ - "/healthz", - "/livez", - "/readyz", - "/version", - "/version/" - ], - "verbs": [ - "get" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-version": "resource-tracker-rbac-1.0.3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-version\":\"resource-tracker-rbac-1.0.3\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:resource-tracker\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"nodes\",\"persistentvolumeclaims\",\"persistentvolumes\",\"pods\",\"services\",\"configmaps\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\"],\"verbs\":[\"create\",\"delete\",\"update\",\"patch\"]},{\"apiGroups\":[\"storage.k8s.io\"],\"resources\":[\"storageclasses\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resources\":[\"pods/portforward\"],\"verbs\":[\"create\"]},{\"apiGroups\":[\"\"],\"resources\":[\"endpoints\"],\"verbs\":[\"create\",\"get\",\"update\"]},{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"create\",\"patch\"]},{\"apiGroups\":[\"metrics.k8s.io\"],\"resources\":[\"pods\"],\"verbs\":[\"list\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "system:resource-tracker", - "resourceVersion": "487", - "uid": "296c2302-ea39-4a5d-8e99-b33c3eb2aac9" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "nodes", - "persistentvolumeclaims", - "persistentvolumes", - "pods", - "services", - "configmaps" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps" - ], - "verbs": [ - "create", - "delete", - "update", - "patch" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "storageclasses" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "pods/portforward" - ], - "verbs": [ - "create" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "endpoints" - ], - "verbs": [ - "create", - "get", - "update" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "events" - ], - "verbs": [ - "create", - "patch" - ] - }, - { - "apiGroups": [ - "metrics.k8s.io" - ], - "resources": [ - "pods" - ], - "verbs": [ - "list" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-07-30T14:54:04Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-07-30T14:54:04Z" - } - ], - "name": "system:service-account-issuer-discovery", - "resourceVersion": "25934314", - "uid": "e834b9d4-fe7c-47cb-bb13-0daec799abb8" - }, - "rules": [ - { - "nonResourceURLs": [ - "/.well-known/openid-configuration", - "/openid/v1/jwks" - ], - "verbs": [ - "get" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "components.gke.io/component-version": "slo-monitor-rbac-1.0.0", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRole\",\"metadata\":{\"annotations\":{\"components.gke.io/component-version\":\"slo-monitor-rbac-1.0.0\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:slo-monitor\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"pods\",\"events\"],\"verbs\":[\"get\",\"watch\",\"list\"]}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:rules": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "system:slo-monitor", - "resourceVersion": "491", - "uid": "9b92ed22-7895-494b-89e2-36b32402c5ec" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "pods", - "events" - ], - "verbs": [ - "get", - "watch", - "list" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:rules": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:volume-scheduler", - "resourceVersion": "64", - "uid": "ea98c42b-a5f4-4e06-8d60-69968f9e2a3c" - }, - "rules": [ - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumes" - ], - "verbs": [ - "get", - "list", - "patch", - "update", - "watch" - ] - }, - { - "apiGroups": [ - "storage.k8s.io" - ], - "resources": [ - "storageclasses" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "persistentvolumeclaims" - ], - "verbs": [ - "get", - "list", - "patch", - "update", - "watch" - ] - } - ] - }, - { - "aggregationRule": { - "clusterRoleSelectors": [ - { - "matchLabels": { - "rbac.authorization.k8s.io/aggregate-to-view": "true" - } - } - ] - }, - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults", - "rbac.authorization.k8s.io/aggregate-to-edit": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:aggregationRule": { - ".": {}, - "f:clusterRoleSelectors": {} - }, - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {}, - "f:rbac.authorization.k8s.io/aggregate-to-edit": {} - } - } - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:rules": {} - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:15Z" - } - ], - "name": "view", - "resourceVersion": "31982303", - "uid": "142ec71e-e611-4532-b0bf-57a0d50a5b27" - }, - "rules": [ - { - "apiGroups": [ - "operators.coreos.com" - ], - "resources": [ - "clusterserviceversions", - "catalogsources", - "installplans", - "subscriptions", - "operatorgroups" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "packages.operators.coreos.com" - ], - "resources": [ - "packagemanifests", - "packagemanifests/icon" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "configmaps", - "endpoints", - "persistentvolumeclaims", - "persistentvolumeclaims/status", - "pods", - "replicationcontrollers", - "replicationcontrollers/scale", - "serviceaccounts", - "services", - "services/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "bindings", - "events", - "limitranges", - "namespaces/status", - "pods/log", - "pods/status", - "replicationcontrollers/status", - "resourcequotas", - "resourcequotas/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "" - ], - "resources": [ - "namespaces" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apps" - ], - "resources": [ - "controllerrevisions", - "daemonsets", - "daemonsets/status", - "deployments", - "deployments/scale", - "deployments/status", - "replicasets", - "replicasets/scale", - "replicasets/status", - "statefulsets", - "statefulsets/scale", - "statefulsets/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "autoscaling" - ], - "resources": [ - "horizontalpodautoscalers", - "horizontalpodautoscalers/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "batch" - ], - "resources": [ - "cronjobs", - "cronjobs/status", - "jobs", - "jobs/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "extensions" - ], - "resources": [ - "daemonsets", - "daemonsets/status", - "deployments", - "deployments/scale", - "deployments/status", - "ingresses", - "ingresses/status", - "networkpolicies", - "replicasets", - "replicasets/scale", - "replicasets/status", - "replicationcontrollers/scale" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "policy" - ], - "resources": [ - "poddisruptionbudgets", - "poddisruptionbudgets/status" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "networking.k8s.io" - ], - "resources": [ - "ingresses", - "ingresses/status", - "networkpolicies" - ], - "verbs": [ - "get", - "list", - "watch" - ] - }, - { - "apiGroups": [ - "apiextensions.k8s.io" - ], - "resourceNames": [ - "viziers.px.dev" - ], - "resources": [ - "customresourcedefinitions" - ], - "verbs": [ - "get" - ] - }, - { - "apiGroups": [ - "px.dev" - ], - "resources": [ - "viziers" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:47:13Z", - "labels": { - "olm.opgroup.permissions/aggregate-to-c287d32d82d2c74d-admin": "true", - "rbac.authorization.k8s.io/aggregate-to-admin": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:olm.opgroup.permissions/aggregate-to-c287d32d82d2c74d-admin": {}, - "f:rbac.authorization.k8s.io/aggregate-to-admin": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"5e5f7c01-e1d1-41d4-bb2e-1dc7a7c42f1d\"}": { - ".": {}, - "f:apiVersion": {}, - "f:blockOwnerDeletion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:rules": {} - }, - "manager": "olm", - "operation": "Update", - "time": "2021-08-12T11:47:13Z" - } - ], - "name": "viziers.px.dev-v1alpha1-admin", - "ownerReferences": [ - { - "apiVersion": "apiextensions.k8s.io/v1", - "blockOwnerDeletion": false, - "controller": false, - "kind": "CustomResourceDefinition", - "name": "viziers.px.dev", - "uid": "5e5f7c01-e1d1-41d4-bb2e-1dc7a7c42f1d" - } - ], - "resourceVersion": "31982290", - "uid": "d5c84eeb-8c91-47e5-9a0b-d9ce85b16421" - }, - "rules": [ - { - "apiGroups": [ - "px.dev" - ], - "resources": [ - "viziers" - ], - "verbs": [ - "*" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:47:13Z", - "labels": { - "olm.opgroup.permissions/aggregate-to-c287d32d82d2c74d-view": "true", - "rbac.authorization.k8s.io/aggregate-to-view": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:olm.opgroup.permissions/aggregate-to-c287d32d82d2c74d-view": {}, - "f:rbac.authorization.k8s.io/aggregate-to-view": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"5e5f7c01-e1d1-41d4-bb2e-1dc7a7c42f1d\"}": { - ".": {}, - "f:apiVersion": {}, - "f:blockOwnerDeletion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:rules": {} - }, - "manager": "olm", - "operation": "Update", - "time": "2021-08-12T11:47:13Z" - } - ], - "name": "viziers.px.dev-v1alpha1-crdview", - "ownerReferences": [ - { - "apiVersion": "apiextensions.k8s.io/v1", - "blockOwnerDeletion": false, - "controller": false, - "kind": "CustomResourceDefinition", - "name": "viziers.px.dev", - "uid": "5e5f7c01-e1d1-41d4-bb2e-1dc7a7c42f1d" - } - ], - "resourceVersion": "31982302", - "uid": "1d76939f-c6e7-47e6-b611-49af0ac55de7" - }, - "rules": [ - { - "apiGroups": [ - "apiextensions.k8s.io" - ], - "resourceNames": [ - "viziers.px.dev" - ], - "resources": [ - "customresourcedefinitions" - ], - "verbs": [ - "get" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:47:13Z", - "labels": { - "olm.opgroup.permissions/aggregate-to-c287d32d82d2c74d-edit": "true", - "rbac.authorization.k8s.io/aggregate-to-edit": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:olm.opgroup.permissions/aggregate-to-c287d32d82d2c74d-edit": {}, - "f:rbac.authorization.k8s.io/aggregate-to-edit": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"5e5f7c01-e1d1-41d4-bb2e-1dc7a7c42f1d\"}": { - ".": {}, - "f:apiVersion": {}, - "f:blockOwnerDeletion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:rules": {} - }, - "manager": "olm", - "operation": "Update", - "time": "2021-08-12T11:47:13Z" - } - ], - "name": "viziers.px.dev-v1alpha1-edit", - "ownerReferences": [ - { - "apiVersion": "apiextensions.k8s.io/v1", - "blockOwnerDeletion": false, - "controller": false, - "kind": "CustomResourceDefinition", - "name": "viziers.px.dev", - "uid": "5e5f7c01-e1d1-41d4-bb2e-1dc7a7c42f1d" - } - ], - "resourceVersion": "31982293", - "uid": "2226bd1f-8353-4de9-84b7-de9cbe594d26" - }, - "rules": [ - { - "apiGroups": [ - "px.dev" - ], - "resources": [ - "viziers" - ], - "verbs": [ - "create", - "update", - "patch", - "delete" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRole", - "metadata": { - "creationTimestamp": "2021-08-12T11:47:13Z", - "labels": { - "olm.opgroup.permissions/aggregate-to-c287d32d82d2c74d-view": "true", - "rbac.authorization.k8s.io/aggregate-to-view": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:olm.opgroup.permissions/aggregate-to-c287d32d82d2c74d-view": {}, - "f:rbac.authorization.k8s.io/aggregate-to-view": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"5e5f7c01-e1d1-41d4-bb2e-1dc7a7c42f1d\"}": { - ".": {}, - "f:apiVersion": {}, - "f:blockOwnerDeletion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:rules": {} - }, - "manager": "olm", - "operation": "Update", - "time": "2021-08-12T11:47:13Z" - } - ], - "name": "viziers.px.dev-v1alpha1-view", - "ownerReferences": [ - { - "apiVersion": "apiextensions.k8s.io/v1", - "blockOwnerDeletion": false, - "controller": false, - "kind": "CustomResourceDefinition", - "name": "viziers.px.dev", - "uid": "5e5f7c01-e1d1-41d4-bb2e-1dc7a7c42f1d" - } - ], - "resourceVersion": "31982297", - "uid": "ce4493ae-225b-4d2a-921a-c22b2926e817" - }, - "rules": [ - { - "apiGroups": [ - "px.dev" - ], - "resources": [ - "viziers" - ], - "verbs": [ - "get", - "list", - "watch" - ] - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-controller-role-binding\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-controller-role-binding\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"ca-controller-roles\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"ca-controller-service-account\",\"namespace\":\"cyberarmor-system\"}]}\n" - }, - "creationTimestamp": "2021-10-12T00:18:37Z", - "labels": { - "app": "ca-controller-role-binding", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:37Z" - } - ], - "name": "ca-controller-role-binding", - "resourceVersion": "60786656", - "uid": "cfba68fb-640f-48da-937f-280051340148" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "ca-controller-roles" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "ca-controller-service-account", - "namespace": "cyberarmor-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "cluster-admin", - "resourceVersion": "100", - "uid": "767593c3-9a03-487f-9feb-0ce68bcb7cb7" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "cluster-admin" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Group", - "name": "system:masters" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "updateinfo-crd", - "components.gke.io/component-version": "1.1.0", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"updateinfo-crd\",\"components.gke.io/component-version\":\"1.1.0\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"cluster-autoscaler-updateinfo\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"read-updateinfo\"},\"subjects\":[{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"User\",\"name\":\"cluster-autoscaler\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:43Z" - } - ], - "name": "cluster-autoscaler-updateinfo", - "resourceVersion": "25934522", - "uid": "58406120-6791-4537-bf45-45201201686e" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "read-updateinfo" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "cluster-autoscaler" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"event-exporter\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"event-exporter-rb\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"view\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"event-exporter-sa\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "event-exporter", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - } - ], - "name": "event-exporter-rb", - "resourceVersion": "352", - "uid": "105bdc3d-99f8-41f8-adf0-ccef573d093e" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "view" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "event-exporter-sa", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"gce:beta:kubelet-certificate-bootstrap\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"gce:beta:kubelet-certificate-bootstrap\"},\"subjects\":[{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"User\",\"name\":\"kubelet\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:30Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:30Z" - } - ], - "name": "gce:beta:kubelet-certificate-bootstrap", - "resourceVersion": "614", - "uid": "346557aa-9bac-442a-8f58-7467d21cdb87" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "gce:beta:kubelet-certificate-bootstrap" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "kubelet" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"gce:beta:kubelet-certificate-rotation\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"gce:beta:kubelet-certificate-rotation\"},\"subjects\":[{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"Group\",\"name\":\"system:nodes\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:30Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:30Z" - } - ], - "name": "gce:beta:kubelet-certificate-rotation", - "resourceVersion": "615", - "uid": "7f45fe58-0bd1-42ba-9248-ca38daea62af" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "gce:beta:kubelet-certificate-rotation" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Group", - "name": "system:nodes" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"gce:cloud-provider\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"gce:cloud-provider\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"cloud-provider\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "gce:cloud-provider", - "resourceVersion": "592", - "uid": "1165920c-f1ba-41dd-8989-fc725e8775e5" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "gce:cloud-provider" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "cloud-provider", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"gke-metrics-agent\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"gke-metrics-agent\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"gke-metrics-agent\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - } - ], - "name": "gke-metrics-agent", - "resourceVersion": "439", - "uid": "1ead786c-f22a-43e9-825c-b0b25b7f2fd3" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "gke-metrics-agent" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "gke-metrics-agent", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"hipster-cluster-role-binding\"},\"name\":\"hipster-cluster-role-binding\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"hipster-secret-access\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"hipster-account\",\"namespace\":\"$NAMESPACE\"}]}\n" - }, - "creationTimestamp": "2021-07-04T18:22:52Z", - "labels": { - "app": "hipster-cluster-role-binding" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-04T18:22:52Z" - } - ], - "name": "hipster-cluster-role-binding", - "resourceVersion": "11500882", - "uid": "90857ecf-43c8-4738-9b11-372b5f0e3b85" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "hipster-secret-access" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "hipster-account", - "namespace": "$NAMESPACE" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"kube-apiserver-kubelet-api-admin\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"kubelet-api-admin\"},\"subjects\":[{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"User\",\"name\":\"kube-apiserver\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:30Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:30Z" - } - ], - "name": "kube-apiserver-kubelet-api-admin", - "resourceVersion": "612", - "uid": "b9e26e05-727c-46a1-bc6a-a82b69463ae2" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "kubelet-api-admin" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "kube-apiserver" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"kubelet-bootstrap\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:node-bootstrapper\"},\"subjects\":[{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"User\",\"name\":\"kubelet\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:30Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:30Z" - } - ], - "name": "kubelet-bootstrap", - "resourceVersion": "618", - "uid": "9bdc3cb3-2efd-4856-8342-326fe728044a" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:node-bootstrapper" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "kubelet" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kubelet-bootstrap-certificate-bootstrap\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"gce:beta:kubelet-certificate-bootstrap\"},\"subjects\":[{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"User\",\"name\":\"kubelet-bootstrap\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - } - ], - "name": "kubelet-bootstrap-certificate-bootstrap", - "resourceVersion": "345", - "uid": "5542c268-5503-40b3-9550-6b4acbba4dc4" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "gce:beta:kubelet-certificate-bootstrap" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "kubelet-bootstrap" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kubelet-bootstrap-node-bootstrapper\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:node-bootstrapper\"},\"subjects\":[{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"User\",\"name\":\"kubelet-bootstrap\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - } - ], - "name": "kubelet-bootstrap-node-bootstrapper", - "resourceVersion": "344", - "uid": "68110c9c-4f03-4a8b-96c6-7ea9364e962f" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:node-bootstrapper" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "kubelet-bootstrap" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:18Z", - "labels": { - "addonmanager.kubernetes.io/mode": "EnsureExists" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:18Z" - } - ], - "name": "kubelet-cluster-admin", - "resourceVersion": "306", - "uid": "c214c15e-3507-4714-89ec-92429d0b0147" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:node" - } - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kubelet-user-npd-binding\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:node-problem-detector\"},\"subjects\":[{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"User\",\"name\":\"kubelet\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - } - ], - "name": "kubelet-user-npd-binding", - "resourceVersion": "408", - "uid": "34e7de1f-c4cf-4d94-a28d-adda53de66fd" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:node-problem-detector" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "kubelet" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1beta1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"master-monitoring-role-binding\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:master-monitoring-role\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:master-prom-to-sd-monitor\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:29Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1beta1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-30T14:49:48Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1beta1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-13T14:29:47Z" - } - ], - "name": "master-monitoring-role-binding", - "resourceVersion": "61538090", - "uid": "761c923e-15d0-43e5-ae01-3a7aba89c7ee" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:master-monitoring-role" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:master-prom-to-sd-monitor" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"metrics-server:system:auth-delegator\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:auth-delegator\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"metrics-server\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - } - ], - "name": "metrics-server:system:auth-delegator", - "resourceVersion": "387", - "uid": "3a7c1315-7136-49b6-a4fc-78906206c6b8" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:auth-delegator" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "metrics-server", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"npd-binding\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:node-problem-detector\"},\"subjects\":[{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"User\",\"name\":\"system:node-problem-detector\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - } - ], - "name": "npd-binding", - "resourceVersion": "411", - "uid": "c29ba1c8-6835-4098-a8c2-0ea79c6bbee8" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:node-problem-detector" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:node-problem-detector" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "creationTimestamp": "2021-08-12T11:45:59Z", - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "px", - "operation": "Update", - "time": "2021-08-12T11:45:58Z" - } - ], - "name": "olm-operator-binding-olm", - "resourceVersion": "31981653", - "uid": "785e5e62-2730-4cb4-aea1-7d070f715b4b" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:operator-lifecycle-manager" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "olm-operator-serviceaccount", - "namespace": "olm" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "creationTimestamp": "2021-08-31T19:47:18Z", - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "px", - "operation": "Update", - "time": "2021-08-31T19:47:18Z" - } - ], - "name": "olm-operator-cluster-binding-olm", - "resourceVersion": "41268496", - "uid": "ee936583-82fd-44ad-a4a1-3b2c4ccdfca5" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:operator-lifecycle-manager" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "olm-operator-serviceaccount", - "namespace": "olm" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-controller-attacher-binding\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"pdcsi-attacher-role\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:pdcsi-controller\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-controller-attacher-binding", - "resourceVersion": "473", - "uid": "25cbf00e-7147-4218-bd41-5bd170d676f6" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "pdcsi-attacher-role" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:pdcsi-controller" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-controller-provisioner-binding\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"pdcsi-provisioner-role\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:pdcsi-controller\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-controller-provisioner-binding", - "resourceVersion": "474", - "uid": "351d5c33-fed3-4b4d-b2e0-1a94f8aff7d0" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "pdcsi-provisioner-role" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:pdcsi-controller" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-controller-resizer-binding\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"pdcsi-resizer-role\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:pdcsi-controller\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-controller-resizer-binding", - "resourceVersion": "475", - "uid": "fcc9c395-88fe-46c2-9ff4-4307668020f2" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "pdcsi-resizer-role" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:pdcsi-controller" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-snapshotter-binding\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"pdcsi-snapshotter-role\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:pdcsi-controller\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-snapshotter-binding", - "resourceVersion": "476", - "uid": "5551c696-5c10-4d11-9adb-8470da461e9a" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "pdcsi-snapshotter-role" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:pdcsi-controller" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "creationTimestamp": "2021-08-31T19:48:24Z", - "labels": { - "olm.owner": "pixie-operator.v0.0.7", - "olm.owner.kind": "ClusterServiceVersion", - "olm.owner.namespace": "px-operator", - "operators.coreos.com/pixie-operator.px-operator": "" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:olm.owner": {}, - "f:olm.owner.kind": {}, - "f:olm.owner.namespace": {}, - "f:operators.coreos.com/pixie-operator.px-operator": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "olm", - "operation": "Update", - "time": "2021-08-31T19:48:25Z" - } - ], - "name": "pixie-operator.v0.0.7-pixie-operator-service-account-7d476f658d", - "resourceVersion": "41269054", - "uid": "bf81fc5f-440d-408d-a86d-fef95d011945" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "pixie-operator.v0.0.7-pixie-operator-service-account-7d476f658d" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "pixie-operator-service-account", - "namespace": "px-operator" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "snapshot-controller", - "components.gke.io/component-version": "0.5.5", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"snapshot-controller\",\"components.gke.io/component-version\":\"0.5.5\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"snapshot-controller-role\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"snapshot-controller-runner\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:snapshot-controller\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/layer": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:42Z" - } - ], - "name": "snapshot-controller-role", - "resourceVersion": "41911915", - "uid": "da34013c-4a9b-4381-a34d-4029c663c2f6" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "snapshot-controller-runner" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:snapshot-controller" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"stackdriver:metadata-agent\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"stackdriver:metadata-agent\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"metadata-agent\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - } - ], - "name": "stackdriver:metadata-agent", - "resourceVersion": "375", - "uid": "ec30c963-04d8-4efe-afab-cd15e00c5f62" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "stackdriver:metadata-agent" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "metadata-agent", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "storageversionmigrator-rbac", - "components.gke.io/component-version": "0.0.3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"storageversionmigrator-rbac\",\"components.gke.io/component-version\":\"0.0.3\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"storage-version-migration-crd-creator\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"storage-version-migration-crd-creator\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:storageversionmigrator\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - } - ], - "name": "storage-version-migration-crd-creator", - "resourceVersion": "560", - "uid": "3d4cc8c6-283b-46da-9682-75b47008da41" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "storage-version-migration-crd-creator" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:storageversionmigrator" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "storageversionmigrator-rbac", - "components.gke.io/component-version": "0.0.3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"storageversionmigrator-rbac\",\"components.gke.io/component-version\":\"0.0.3\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"storage-version-migration-initializer\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"storage-version-migration-initializer\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:storageversionmigrator\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - } - ], - "name": "storage-version-migration-initializer", - "resourceVersion": "561", - "uid": "6421b1e0-0538-4d0a-90cf-f5b6f7d90afd" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "storage-version-migration-initializer" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:storageversionmigrator" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "storageversionmigrator-rbac", - "components.gke.io/component-version": "0.0.3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"storageversionmigrator-rbac\",\"components.gke.io/component-version\":\"0.0.3\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"storage-version-migration-migrator-v2\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"cluster-admin\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:storageversionmigrator\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - } - ], - "name": "storage-version-migration-migrator-v2", - "resourceVersion": "558", - "uid": "0d578d6b-cd6b-4c7e-8762-ac644e9a7f53" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "cluster-admin" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:storageversionmigrator" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "storageversionmigrator-rbac", - "components.gke.io/component-version": "0.0.3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"storageversionmigrator-rbac\",\"components.gke.io/component-version\":\"0.0.3\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"storage-version-migration-trigger\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"storage-version-migration-trigger\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:storageversionmigrator\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - } - ], - "name": "storage-version-migration-trigger", - "resourceVersion": "559", - "uid": "6fc5b149-a81f-4165-a8cf-12857822cc2c" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "storage-version-migration-trigger" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:storageversionmigrator" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:basic-user", - "resourceVersion": "102", - "uid": "4e08185a-7034-409b-bb35-cae291bcaac4" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:basic-user" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Group", - "name": "system:authenticated" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "clustermetrics-rbac", - "components.gke.io/component-version": "1.4.0", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"clustermetrics-rbac\",\"components.gke.io/component-version\":\"1.4.0\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:clustermetrics\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:clustermetrics\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:clustermetrics\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - } - ], - "name": "system:clustermetrics", - "resourceVersion": "428", - "uid": "66d5f746-6647-4cdf-a764-09d02aba3c9b" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:clustermetrics" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:clustermetrics" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:attachdetach-controller", - "resourceVersion": "110", - "uid": "cd980aaa-da46-4eca-a307-93ae835ad974" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:attachdetach-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "attachdetach-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:certificate-controller", - "resourceVersion": "135", - "uid": "b5b1f44b-b323-4c63-bb95-7a9abd1b0a99" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:certificate-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "certificate-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:clusterrole-aggregation-controller", - "resourceVersion": "111", - "uid": "bcbd8c05-f184-49fa-a747-f16395362d31" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:clusterrole-aggregation-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "clusterrole-aggregation-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:cronjob-controller", - "resourceVersion": "112", - "uid": "619c05fc-f079-478b-9e02-5c2672f84dae" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:cronjob-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "cronjob-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:daemon-set-controller", - "resourceVersion": "113", - "uid": "cdd5f999-88f2-41b5-a0bd-f0b619a8d8e8" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:daemon-set-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "daemon-set-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:deployment-controller", - "resourceVersion": "114", - "uid": "4e8db74b-595e-46a8-8838-10398dccfaaf" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:deployment-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "deployment-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:disruption-controller", - "resourceVersion": "115", - "uid": "f623e973-3389-430a-bb3e-47428604614d" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:disruption-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "disruption-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:endpoint-controller", - "resourceVersion": "116", - "uid": "084c808b-8ade-4df6-912d-60cf6b1fc989" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:endpoint-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "endpoint-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:endpointslice-controller", - "resourceVersion": "117", - "uid": "4c0b4944-80d6-42f7-894d-0160459f0548" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:endpointslice-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "endpointslice-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:endpointslicemirroring-controller", - "resourceVersion": "118", - "uid": "3da4f465-3907-4042-b52c-8529bf01f05e" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:endpointslicemirroring-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "endpointslicemirroring-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:expand-controller", - "resourceVersion": "119", - "uid": "cc1a6171-787e-415c-9084-96cae4346409" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:expand-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "expand-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:generic-garbage-collector", - "resourceVersion": "120", - "uid": "d9fba7ad-f8bd-41af-ae46-09dd5eb48668" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:generic-garbage-collector" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "generic-garbage-collector", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:controller:glbc\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:controller:glbc\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:controller:glbc\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:30Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:30Z" - } - ], - "name": "system:controller:glbc", - "resourceVersion": "611", - "uid": "1d75f06c-24ec-49ff-8363-0080cd92ad5b" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:glbc" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:controller:glbc" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:horizontal-pod-autoscaler", - "resourceVersion": "121", - "uid": "f093fe6e-c91f-419d-9247-4cec95a9bde1" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:horizontal-pod-autoscaler" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "horizontal-pod-autoscaler", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:job-controller", - "resourceVersion": "122", - "uid": "075db69a-cadf-496e-b0b4-5bf678ecd75d" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:job-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "job-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:namespace-controller", - "resourceVersion": "123", - "uid": "e9524cee-2d5f-4767-b215-f3920387ee1a" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:namespace-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "namespace-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:node-controller", - "resourceVersion": "124", - "uid": "225b3aa4-6e67-4684-85c6-7d5d72dc3ebd" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:node-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "node-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:persistent-volume-binder", - "resourceVersion": "125", - "uid": "0b404e82-8b0f-4f85-a210-fdbebef82d05" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:persistent-volume-binder" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "persistent-volume-binder", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:pod-garbage-collector", - "resourceVersion": "126", - "uid": "59d06c07-e622-4f79-8b2a-bf0df02e14aa" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:pod-garbage-collector" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "pod-garbage-collector", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:pv-protection-controller", - "resourceVersion": "137", - "uid": "0fda5772-2aba-4b3e-93db-ab52d3ab7c69" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:pv-protection-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "pv-protection-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:pvc-protection-controller", - "resourceVersion": "136", - "uid": "5a484ad7-5d1a-41b2-9f9f-7194890989ea" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:pvc-protection-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "pvc-protection-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:replicaset-controller", - "resourceVersion": "127", - "uid": "5f0005f1-a4d6-4fb8-bc82-96b2c04c8930" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:replicaset-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "replicaset-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:replication-controller", - "resourceVersion": "128", - "uid": "d5c35687-ebeb-47d0-805a-a28cfe68caf1" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:replication-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "replication-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:resourcequota-controller", - "resourceVersion": "129", - "uid": "7afc3566-931b-4ada-b4b4-44c3be3d060a" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:resourcequota-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "resourcequota-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:root-ca-cert-publisher", - "resourceVersion": "138", - "uid": "135e0be6-ce12-48e3-b320-08912d3c64e1" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:root-ca-cert-publisher" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "root-ca-cert-publisher", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:route-controller", - "resourceVersion": "130", - "uid": "5bbca500-5cd9-458d-8c91-137088ad940c" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:route-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "route-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:service-account-controller", - "resourceVersion": "131", - "uid": "2c819998-9e2b-4644-a325-9890d9c5b16c" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:service-account-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "service-account-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:service-controller", - "resourceVersion": "132", - "uid": "07bc6706-5246-4785-8990-d0ca7c1f36b7" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:service-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "service-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:statefulset-controller", - "resourceVersion": "133", - "uid": "51ea4194-b0db-441e-bbc5-fbe51f210d2f" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:statefulset-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "statefulset-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:ttl-controller", - "resourceVersion": "134", - "uid": "787acc9c-35e8-4132-896f-758632fa413c" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:ttl-controller" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "ttl-controller", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:discovery", - "resourceVersion": "101", - "uid": "07bd0905-f126-4d79-9c33-2602c3d535a9" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:discovery" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Group", - "name": "system:authenticated" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "gcp-controller-manager-combined", - "components.gke.io/component-version": "2.1.10", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"gcp-controller-manager-combined\",\"components.gke.io/component-version\":\"2.1.10\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gcp-controller-manager\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:gcp-controller-manager\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:gcp-controller-manager\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/layer": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "system:gcp-controller-manager", - "resourceVersion": "41911910", - "uid": "28dc8e28-dc41-47d9-802e-09b86f4779f4" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:gcp-controller-manager" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:gcp-controller-manager" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "gke-common-webhooks-rbac", - "components.gke.io/component-version": "1.1.2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"gke-common-webhooks-rbac\",\"components.gke.io/component-version\":\"1.1.2\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-common-webhooks\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:gke-common-webhooks\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:gke-common-webhooks\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "system:gke-common-webhooks", - "resourceVersion": "46217992", - "uid": "5d5583bd-a4c4-4f1b-a9c4-65b2d31f7cc9" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:gke-common-webhooks" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:gke-common-webhooks" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-controller\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:gke-controller\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:vpa-recommender\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - } - ], - "name": "system:gke-controller", - "resourceVersion": "570", - "uid": "51bf3954-3bac-4b46-8017-7a1539840f83" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:gke-controller" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:vpa-recommender", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-hpa-actor\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:gke-hpa-actor\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:vpa-recommender\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:27Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:27Z" - } - ], - "name": "system:gke-hpa-actor", - "resourceVersion": "572", - "uid": "28ceb49d-0088-45ed-b0fc-cccd5d8cdb84" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:gke-hpa-actor" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:vpa-recommender", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-hpa-service-reader\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:gke-hpa-service-reader\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:vpa-recommender\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "system:gke-hpa-service-reader", - "resourceVersion": "578", - "uid": "cd90142e-0aa5-48da-b68c-a51093137a90" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:gke-hpa-service-reader" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:vpa-recommender", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "gke-master-healthcheck-rbac", - "components.gke.io/component-version": "1.0.2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"gke-master-healthcheck-rbac\",\"components.gke.io/component-version\":\"1.0.2\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-master-healthcheck\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:gke-master-healthcheck\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:gke-master-healthcheck\"}]}\n" - }, - "creationTimestamp": "2021-07-30T14:54:41Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "system:gke-master-healthcheck", - "resourceVersion": "25934491", - "uid": "86d2d389-a1c8-4a7b-9d24-da4a5d386ccd" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:gke-master-healthcheck" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:gke-master-healthcheck" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-version": "resourcequota-rbac-1.0.1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-version\":\"resourcequota-rbac-1.0.1\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-master-resourcequota\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:gke-master-resourcequota\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:gke-master-resourcequota\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "system:gke-master-resourcequota", - "resourceVersion": "490", - "uid": "be65d218-7d4b-4c2b-a59c-4c1d9bbbab5a" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:gke-master-resourcequota" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:gke-master-resourcequota" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-uas-collection-reader\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:gke-uas-collection-reader\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:vpa-recommender\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "system:gke-uas-collection-reader", - "resourceVersion": "582", - "uid": "b52868d2-d8cd-4815-a758-0d2fca35217d" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:gke-uas-collection-reader" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:vpa-recommender", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-uas-hpa-controller\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:controller:horizontal-pod-autoscaler\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:vpa-recommender\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "system:gke-uas-hpa-controller", - "resourceVersion": "583", - "uid": "c2508017-ca0d-4c74-a795-ad9a55b47894" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:controller:horizontal-pod-autoscaler" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:vpa-recommender", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:gke-uas-metrics-reader\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:gke-uas-metrics-reader\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:vpa-recommender\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "system:gke-uas-metrics-reader", - "resourceVersion": "581", - "uid": "f47adfa0-bbce-4d34-9fbf-3f90a48c1969" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:gke-uas-metrics-reader" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:vpa-recommender", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "l7-lb-controller-rbac", - "components.gke.io/component-version": "1.0.9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"l7-lb-controller-rbac\",\"components.gke.io/component-version\":\"1.0.9\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:glbc-status\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:glbc-status\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:controller:glbc\"},{\"kind\":\"User\",\"name\":\"system:l7-lb-controller\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:subjects": {} - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "system:glbc-status", - "resourceVersion": "25934494", - "uid": "31208058-923b-4ac4-b044-7175f6bf50f1" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:glbc-status" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:controller:glbc" - }, - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:l7-lb-controller" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:kube-controller-manager", - "resourceVersion": "105", - "uid": "b179f10e-160c-41b7-bbbd-1c7c27f3c408" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:kube-controller-manager" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:kube-controller-manager" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:kube-dns", - "resourceVersion": "106", - "uid": "c1f00169-4fb2-4b86-b867-353b794fa22b" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:kube-dns" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "kube-dns", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:kube-dns-autoscaler\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:kube-dns-autoscaler\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"kube-dns-autoscaler\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - } - ], - "name": "system:kube-dns-autoscaler", - "resourceVersion": "426", - "uid": "8e6e8120-c533-4250-8761-af3c22c317db" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:kube-dns-autoscaler" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "kube-dns-autoscaler", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:kube-proxy\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:node-proxier\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "system:kube-proxy", - "resourceVersion": "590", - "uid": "7063d042-e1c3-4976-9579-c457b2bb541b" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:node-proxier" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "kube-proxy", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:kube-scheduler", - "resourceVersion": "107", - "uid": "b0818751-4feb-468e-87cc-a89b09f8bde6" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:kube-scheduler" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:kube-scheduler" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-version": "kubestore-collector-rbac-1.0.0", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-version\":\"kubestore-collector-rbac-1.0.0\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:kubestore-collector\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:kubestore-collector\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:kubestore-collector\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:23Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:23Z" - } - ], - "name": "system:kubestore-collector", - "resourceVersion": "455", - "uid": "4bda0277-92be-4101-b359-07dc63390e05" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:kubestore-collector" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:kubestore-collector" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "managedcertificates", - "components.gke.io/component-version": "2.1.1", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"managedcertificates\",\"components.gke.io/component-version\":\"2.1.1\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:managed-certificate-controller\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:managed-certificate-controller\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:managed-certificate-controller\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/layer": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "system:managed-certificate-controller", - "resourceVersion": "25934497", - "uid": "da5317a2-50ef-4c1d-8636-d0849ae86fc7" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:managed-certificate-controller" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:managed-certificate-controller" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"system:metrics-server\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:metrics-server\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"metrics-server\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - } - ], - "name": "system:metrics-server", - "resourceVersion": "407", - "uid": "60ca2339-bce8-49c3-92d0-9edf128195fb" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:metrics-server" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "metrics-server", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-07-30T14:54:04Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-07-30T14:54:04Z" - } - ], - "name": "system:monitoring", - "resourceVersion": "25934315", - "uid": "5960b55d-5163-44f0-8f8a-c43bbfee968a" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:monitoring" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Group", - "name": "system:monitoring" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - } - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:node", - "resourceVersion": "109", - "uid": "4e075ff5-5e41-4cea-8682-9809ad364d3d" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:node" - } - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:node-proxier", - "resourceVersion": "104", - "uid": "a79558a3-4226-4488-9420-9844112380bf" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:node-proxier" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:kube-proxy" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:00Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:00Z" - } - ], - "name": "system:public-info-viewer", - "resourceVersion": "103", - "uid": "8bf79bf3-cadc-4d7e-ae6f-637c66427869" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:public-info-viewer" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Group", - "name": "system:authenticated" - }, - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Group", - "name": "system:unauthenticated" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-version": "resource-tracker-rbac-1.0.3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-version\":\"resource-tracker-rbac-1.0.3\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:resource-tracker\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:resource-tracker\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:resource-tracker\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "system:resource-tracker", - "resourceVersion": "488", - "uid": "65ace9bf-cd59-426c-894e-3bb0c9db843e" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:resource-tracker" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:resource-tracker" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-07-30T14:54:04Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-07-30T14:54:04Z" - } - ], - "name": "system:service-account-issuer-discovery", - "resourceVersion": "25934316", - "uid": "03b41271-63d3-4dac-b123-74d85df2ca96" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:service-account-issuer-discovery" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Group", - "name": "system:serviceaccounts" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-version": "slo-monitor-rbac-1.0.0", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-version\":\"slo-monitor-rbac-1.0.0\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:slo-monitor\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"system:slo-monitor\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:slo-monitor\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "system:slo-monitor", - "resourceVersion": "492", - "uid": "bf0c2c9e-c51b-4a40-a2af-2a6f1617aa4a" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:slo-monitor" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:slo-monitor" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:volume-scheduler", - "resourceVersion": "108", - "uid": "b9842bff-c6f7-4a25-9f81-38595cea9657" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "system:volume-scheduler" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:kube-scheduler" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "ClusterRoleBinding", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"ClusterRoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"uas-hpa-external-metrics-reader\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"external-metrics-reader\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:vpa-recommender\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "uas-hpa-external-metrics-reader", - "resourceVersion": "576", - "uid": "ba970b84-3fb6-4733-9491-ef5cf45499b6" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "external-metrics-reader" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:vpa-recommender", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:bootstrap-signer", - "namespace": "kube-public", - "resourceVersion": "152", - "uid": "b6b238ee-2368-4b09-8270-d3f69e5c0fcd" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Role", - "name": "system:controller:bootstrap-signer" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "bootstrap-signer", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"RoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"gce:cloud-provider\",\"namespace\":\"kube-system\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"Role\",\"name\":\"gce:cloud-provider\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"cloud-provider\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - } - ], - "name": "gce:cloud-provider", - "namespace": "kube-system", - "resourceVersion": "591", - "uid": "b8108b42-5f6c-4586-bd57-a89a1026daec" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Role", - "name": "gce:cloud-provider" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "cloud-provider", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"RoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"gce:podsecuritypolicy:pdcsi-node-sa\",\"namespace\":\"kube-system\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"ClusterRole\",\"name\":\"gce:podsecuritypolicy:privileged\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"pdcsi-node-sa\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "gce:podsecuritypolicy:pdcsi-node-sa", - "namespace": "kube-system", - "resourceVersion": "479", - "uid": "0576b902-dd80-4c39-90a4-ec7b6685df33" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "ClusterRole", - "name": "gce:podsecuritypolicy:privileged" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "pdcsi-node-sa", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"RoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"metrics-server-auth-reader\",\"namespace\":\"kube-system\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"Role\",\"name\":\"extension-apiserver-authentication-reader\"},\"subjects\":[{\"kind\":\"ServiceAccount\",\"name\":\"metrics-server\",\"namespace\":\"kube-system\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - } - ], - "name": "metrics-server-auth-reader", - "namespace": "kube-system", - "resourceVersion": "388", - "uid": "4df75e62-ae78-4ac1-ba91-bb4893192193" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Role", - "name": "extension-apiserver-authentication-reader" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "metrics-server", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"RoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-leaderelection-binding\",\"namespace\":\"kube-system\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"Role\",\"name\":\"pdcsi-leaderelection\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:pdcsi-controller\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {}, - "f:components.gke.io/layer": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-leaderelection-binding", - "namespace": "kube-system", - "resourceVersion": "478", - "uid": "d7834739-a3cc-4597-980d-b38c92d650d1" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Role", - "name": "pdcsi-leaderelection" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:pdcsi-controller" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "components.gke.io/component-name": "snapshot-controller", - "components.gke.io/component-version": "0.5.5", - "components.gke.io/layer": "addon", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"RoleBinding\",\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"snapshot-controller\",\"components.gke.io/component-version\":\"0.5.5\",\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"snapshot-controller-leaderelection\",\"namespace\":\"kube-system\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"Role\",\"name\":\"snapshot-controller-leaderelection\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:snapshot-controller\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/layer": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:42Z" - } - ], - "name": "snapshot-controller-leaderelection", - "namespace": "kube-system", - "resourceVersion": "41911917", - "uid": "d10b71db-b7b0-4961-8f65-effae5ce08e7" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Role", - "name": "snapshot-controller-leaderelection" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:snapshot-controller" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system::extension-apiserver-authentication-reader", - "namespace": "kube-system", - "resourceVersion": "146", - "uid": "ef96ba2c-ae80-48e0-8d3e-927b179089ea" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Role", - "name": "extension-apiserver-authentication-reader" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:kube-controller-manager" - }, - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:kube-scheduler" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system::leader-locking-kube-controller-manager", - "namespace": "kube-system", - "resourceVersion": "147", - "uid": "6f052bf4-0500-48e7-9b3e-b076f440590a" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Role", - "name": "system::leader-locking-kube-controller-manager" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:kube-controller-manager" - }, - { - "kind": "ServiceAccount", - "name": "kube-controller-manager", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system::leader-locking-kube-scheduler", - "namespace": "kube-system", - "resourceVersion": "148", - "uid": "5b23da24-b385-436e-a430-c0fbd2db9fbf" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Role", - "name": "system::leader-locking-kube-scheduler" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:kube-scheduler" - }, - { - "kind": "ServiceAccount", - "name": "kube-scheduler", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:bootstrap-signer", - "namespace": "kube-system", - "resourceVersion": "149", - "uid": "93252e49-68b8-4c9c-a9f0-b87f16276c4c" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Role", - "name": "system:controller:bootstrap-signer" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "bootstrap-signer", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:cloud-provider", - "namespace": "kube-system", - "resourceVersion": "150", - "uid": "4b095089-e837-4b41-869c-0c9a06b8586d" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Role", - "name": "system:controller:cloud-provider" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "cloud-provider", - "namespace": "kube-system" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"RoleBinding\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\"},\"name\":\"system:controller:glbc\",\"namespace\":\"kube-system\"},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"Role\",\"name\":\"system:controller:glbc\"},\"subjects\":[{\"kind\":\"User\",\"name\":\"system:controller:glbc\"}]}\n" - }, - "creationTimestamp": "2021-06-13T13:42:30Z", - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:30Z" - } - ], - "name": "system:controller:glbc", - "namespace": "kube-system", - "resourceVersion": "610", - "uid": "ec9f28da-888c-4172-a3eb-ae4b8a1b5022" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Role", - "name": "system:controller:glbc" - }, - "subjects": [ - { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "User", - "name": "system:controller:glbc" - } - ] - }, - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "kind": "RoleBinding", - "metadata": { - "annotations": { - "rbac.authorization.kubernetes.io/autoupdate": "true" - }, - "creationTimestamp": "2021-06-13T13:42:01Z", - "labels": { - "kubernetes.io/bootstrapping": "rbac-defaults" - }, - "managedFields": [ - { - "apiVersion": "rbac.authorization.k8s.io/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:rbac.authorization.kubernetes.io/autoupdate": {} - }, - "f:labels": { - ".": {}, - "f:kubernetes.io/bootstrapping": {} - } - }, - "f:roleRef": { - "f:apiGroup": {}, - "f:kind": {}, - "f:name": {} - }, - "f:subjects": {} - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "system:controller:token-cleaner", - "namespace": "kube-system", - "resourceVersion": "151", - "uid": "7127f640-8c3c-417c-bbb1-6795ccacc64e" - }, - "roleRef": { - "apiGroup": "rbac.authorization.k8s.io", - "kind": "Role", - "name": "system:controller:token-cleaner" - }, - "subjects": [ - { - "kind": "ServiceAccount", - "name": "token-cleaner", - "namespace": "kube-system" - } - ] - } - ], - "listInputKinds": null - } - ], - "remediation": "It is recommended to prohibit “kubectl exec” command in production environments. It is also recommended not to use subjects with this permission for daily cluster operations.", - "description": "Attackers with relevant permissions can run malicious commands in the context of legitimate containers in the cluster using “kubectl exec” command. This control determines which subjects have permissions to use this command.", - "score": 96 - }, - { - "guid": "", - "attributes": { - "armoBuiltin": true - }, - "id": "C-0028", - "controlID": "C-0028", - "name": "Dangerous capabilities", - "ruleReports": [ - { - "name": "dangerous-capabilities", - "remediation": "", - "ruleStatus": { - "status": "success", - "message": "" - }, - "ruleResponses": null, - "listInputResources": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-audit\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-audit\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CONFIG_FILES\",\"value\":\"/config/config.json\"},{\"name\":\"CA_SERVER_TYPE\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"cluster_kind\",\"name\":\"ca-audit\"}}}],\"image\":\"quay.io/armosec/k8s-ca-auditlog-ubi:21\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-audit\",\"ports\":[{\"containerPort\":443,\"name\":\"ca-audit-port\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/config\",\"name\":\"ca-audit\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-audit\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"config\",\"path\":\"config.json\"}],\"name\":\"ca-audit\"},\"name\":\"ca-audit\"},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:54Z", - "generation": 1, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CONFIG_FILES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_SERVER_TYPE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:54Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-audit", - "namespace": "cyberarmor-system", - "resourceVersion": "60787209", - "uid": "687f52ea-6956-4e8a-bb8c-7ea35a04b3f0" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-audit" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CONFIG_FILES", - "value": "/config/config.json" - }, - { - "name": "CA_SERVER_TYPE", - "valueFrom": { - "configMapKeyRef": { - "key": "cluster_kind", - "name": "ca-audit" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-auditlog-ubi:21", - "imagePullPolicy": "Always", - "name": "ca-audit", - "ports": [ - { - "containerPort": 443, - "name": "ca-audit-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/config", - "name": "ca-audit", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-audit", - "serviceAccountName": "ca-audit", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "config", - "path": "config.json" - } - ], - "name": "ca-audit" - }, - "name": "ca-audit" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:54Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-audit-c667df747\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-dashboard-aggregator\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-dashboard-aggregator\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-configtype=1\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-dashboard-aggregator\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"40Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:55Z", - "generation": 1, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-dashboard-aggregator\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:55Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T23:55:20Z" - } - ], - "name": "ca-dashboard-aggregator", - "namespace": "cyberarmor-system", - "resourceVersion": "61250607", - "uid": "0ba23569-e254-4388-b22f-30cc1eca031b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-dashboard-aggregator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-configtype=1", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173", - "imagePullPolicy": "Always", - "name": "ca-dashboard-aggregator", - "resources": { - "limits": { - "cpu": "200m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "40Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:18:55Z", - "lastUpdateTime": "2021-10-12T00:19:19Z", - "message": "ReplicaSet \"ca-dashboard-aggregator-5b8bdbc8f5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-12T23:55:20Z", - "lastUpdateTime": "2021-10-12T23:55:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-notification-server\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-notification-server\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"maserNotificationServer\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\",\"value\":\"customerGUID\"},{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\",\"value\":\"8001\"},{\"name\":\"CA_NOTIFICATION_SERVER_PORT\",\"value\":\"8002\"}],\"image\":\"quay.io/armosec/notification-server-ubi:89\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-notification-server\",\"ports\":[{\"containerPort\":8001,\"name\":\"websocket\"},{\"containerPort\":8002,\"name\":\"rest-api\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:59Z", - "generation": 1, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-notification-server\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8001,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:59Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:11Z" - } - ], - "name": "ca-notification-server", - "namespace": "cyberarmor-system", - "resourceVersion": "60787036", - "uid": "8c3dc6fe-e730-4364-8445-dc5a05ad2b0f" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-notification-server" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_HOST", - "valueFrom": { - "configMapKeyRef": { - "key": "maserNotificationServer", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_ATTRIBUTES", - "value": "customerGUID" - }, - { - "name": "CA_NOTIFICATION_SERVER_WS_PORT", - "value": "8001" - }, - { - "name": "CA_NOTIFICATION_SERVER_PORT", - "value": "8002" - } - ], - "image": "quay.io/armosec/notification-server-ubi:89", - "imagePullPolicy": "Always", - "name": "ca-notification-server", - "ports": [ - { - "containerPort": 8001, - "name": "websocket", - "protocol": "TCP" - }, - { - "containerPort": 8002, - "name": "rest-api", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "50Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:11Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:59Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "ReplicaSet \"ca-notification-server-6fd966c875\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-ocimage\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-ocimage\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-ocimage:63\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-ocimage\",\"ports\":[{\"containerPort\":8080,\"name\":\"ca-ocimage-port\"}],\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:51Z", - "generation": 1, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-ocimage\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:04Z" - } - ], - "name": "ca-ocimage", - "namespace": "cyberarmor-system", - "resourceVersion": "60786986", - "uid": "a6d37edf-b144-4677-91b3-73c73d9c7df6" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-ocimage" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-ocimage:63", - "imagePullPolicy": "Always", - "name": "ca-ocimage", - "ports": [ - { - "containerPort": 8080, - "name": "ca-ocimage-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "1", - "memory": "1000Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:04Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:51Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "ReplicaSet \"ca-ocimage-5576ff7d7d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-oracle\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-oracle\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_ORACLE_PORT\",\"value\":\"4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8002\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-oracle-ubi:11\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-oracle\",\"ports\":[{\"containerPort\":4000,\"name\":\"ca-oracle\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:19:01Z", - "generation": 1, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-oracle\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:19:01Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-oracle", - "namespace": "cyberarmor-system", - "resourceVersion": "60787203", - "uid": "da3dd21c-bf13-4d2a-97da-ca80b94d08d3" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-oracle" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_ORACLE_PORT", - "value": "4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8002" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-oracle-ubi:11", - "imagePullPolicy": "Always", - "name": "ca-oracle", - "ports": [ - { - "containerPort": 4000, - "name": "ca-oracle", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:19:01Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-oracle-6c98c6bdbf\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-posture\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-posture\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8001\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-posture-ubi:112\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-posture\",\"ports\":[{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/resources/config\",\"name\":\"ca-posture-score-config\",\"readOnly\":false},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"},{\"configMap\":{\"items\":[{\"key\":\"resourcesdict.json\",\"path\":\"resourcesdict.json\"},{\"key\":\"frameworkdict.json\",\"path\":\"frameworkdict.json\"}],\"name\":\"ca-posture-score-config\"},\"name\":\"ca-posture-score-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:58Z", - "generation": 1, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-posture\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/resources/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-posture-score-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:58Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:45Z" - } - ], - "name": "ca-posture", - "namespace": "cyberarmor-system", - "resourceVersion": "60787259", - "uid": "f41f4dc1-cfb0-4201-bca7-f1cf0b72b6b7" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-posture" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8001" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-posture-ubi:112", - "imagePullPolicy": "Always", - "name": "ca-posture", - "ports": [ - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "500m", - "memory": "100Mi" - }, - "requests": { - "cpu": "100m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/resources/config", - "name": "ca-posture-score-config" - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "resourcesdict.json", - "path": "resourcesdict.json" - }, - { - "key": "frameworkdict.json", - "path": "frameworkdict.json" - } - ], - "name": "ca-posture-score-config" - }, - "name": "ca-posture-score-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:45Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:58Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "ReplicaSet \"ca-posture-5996968d7b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-rbac\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-rbac\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"S3_BUCKET\",\"value\":\"ca-kubernetes-rbac-db-dev\"},{\"name\":\"AWS_REGION\",\"value\":\"eu-west-1\"},{\"name\":\"AWS_ACCESS_KEY_ID\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keyid\",\"name\":\"ca-rbac\"}}},{\"name\":\"AWS_SECRET_ACCESS_KEY\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keysecret\",\"name\":\"ca-rbac\"}}}],\"image\":\"quay.io/armosec/k8s-ca-rbac-scanner-ubi:20\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-rbac\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"400Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:50Z", - "generation": 1, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-rbac\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AWS_ACCESS_KEY_ID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"AWS_REGION\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"AWS_SECRET_ACCESS_KEY\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"S3_BUCKET\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:13Z" - } - ], - "name": "ca-rbac", - "namespace": "cyberarmor-system", - "resourceVersion": "60787051", - "uid": "d5898a09-2489-4254-b210-0725ddb2427a" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-rbac" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "S3_BUCKET", - "value": "ca-kubernetes-rbac-db-dev" - }, - { - "name": "AWS_REGION", - "value": "eu-west-1" - }, - { - "name": "AWS_ACCESS_KEY_ID", - "valueFrom": { - "secretKeyRef": { - "key": "keyid", - "name": "ca-rbac" - } - } - }, - { - "name": "AWS_SECRET_ACCESS_KEY", - "valueFrom": { - "secretKeyRef": { - "key": "keysecret", - "name": "ca-rbac" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-rbac-scanner-ubi:20", - "imagePullPolicy": "Always", - "name": "ca-rbac", - "resources": { - "limits": { - "cpu": "200m", - "memory": "400Mi" - }, - "requests": { - "cpu": "10m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:13Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:50Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "ReplicaSet \"ca-rbac-75c8cfd6b4\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-vuln-scan\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-vuln-scan\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"EVENT_RECEIVER_URL\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\",\"value\":\"4\"}],\"image\":\"quay.io/armosec/k8s-ca-vuln-scan-ubi:84\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-vuln-scan\",\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1.5Gi\"},\"requests\":{\"cpu\":\"500m\",\"memory\":\"1Gi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:47Z", - "generation": 1, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-vuln-scan\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EVENT_RECEIVER_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:00Z" - } - ], - "name": "ca-vuln-scan", - "namespace": "cyberarmor-system", - "resourceVersion": "60786938", - "uid": "9ea3d6cb-c6c0-423f-aab2-630827939285" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-vuln-scan" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "EVENT_RECEIVER_URL", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_MAX_VULN_SCAN_ROUTINS", - "value": "4" - } - ], - "image": "quay.io/armosec/k8s-ca-vuln-scan-ubi:84", - "imagePullPolicy": "Always", - "name": "ca-vuln-scan", - "resources": { - "limits": { - "cpu": "1", - "memory": "1536Mi" - }, - "requests": { - "cpu": "500m", - "memory": "1Gi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:00Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:47Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "ReplicaSet \"ca-vuln-scan-75b499df8c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-webhook\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-webhook\"}},\"template\":{\"metadata\":{\"annotations\":{\"certificate\":\"d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt\"},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-tlsCertFile=/etc/webhook/certs/tls.crt\",\"-tlsKeyFile=/etc/webhook/certs/tls.key\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_WEBHOOK_NAME\",\"value\":\"ca-webhook\"},{\"name\":\"CA_WEBHOOK_PORT\",\"value\":\"443\"},{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_LOGIN_SECRET_NAME\",\"value\":\"ca-login\"},{\"name\":\"CA_ORACLE_SERVER\",\"value\":\"http://ca-oracle:4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"http://ca-notification-server:8001\"},{\"name\":\"CA_OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-webhook-ubi:606\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-webhook\",\"ports\":[{\"containerPort\":443,\"name\":\"mutating-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"600Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"100Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/cazips\",\"name\":\"zip-download\"},{\"mountPath\":\"/etc/webhook/certs\",\"name\":\"ca-cluster-certificate\",\"readOnly\":true},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"emptyDir\":{},\"name\":\"zip-download\"},{\"name\":\"ca-cluster-certificate\",\"secret\":{\"secretName\":\"ca-cluster-certificate\"}},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:46Z", - "generation": 1, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:certificate": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-webhook\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_LOGIN_SECRET_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/cazips\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/webhook/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-cluster-certificate\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"zip-download\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:16Z" - } - ], - "name": "ca-webhook", - "namespace": "cyberarmor-system", - "resourceVersion": "60787072", - "uid": "c968fe90-8480-471f-bdf1-fa98447ce1d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-webhook" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "certificate": "d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt" - }, - "creationTimestamp": null, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-tlsCertFile=/etc/webhook/certs/tls.crt", - "-tlsKeyFile=/etc/webhook/certs/tls.key", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_WEBHOOK_NAME", - "value": "ca-webhook" - }, - { - "name": "CA_WEBHOOK_PORT", - "value": "443" - }, - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_LOGIN_SECRET_NAME", - "value": "ca-login" - }, - { - "name": "CA_ORACLE_SERVER", - "value": "http://ca-oracle:4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "http://ca-notification-server:8001" - }, - { - "name": "CA_OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-webhook-ubi:606", - "imagePullPolicy": "Always", - "name": "ca-webhook", - "ports": [ - { - "containerPort": 443, - "name": "mutating-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "600Mi" - }, - "requests": { - "cpu": "300m", - "memory": "100Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/cazips", - "name": "zip-download" - }, - { - "mountPath": "/etc/webhook/certs", - "name": "ca-cluster-certificate", - "readOnly": true - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "emptyDir": {}, - "name": "zip-download" - }, - { - "name": "ca-cluster-certificate", - "secret": { - "defaultMode": 420, - "secretName": "ca-cluster-certificate" - } - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:16Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:46Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "ReplicaSet \"ca-webhook-7dd8bbd798\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-websocket\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-websocket\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_VULN_SCAN_SCHEDULE\",\"value\":\"@every 11h\"},{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\",\"value\":\"@every 12h\"},{\"name\":\"CA_DEBUG_SIGNER\",\"value\":null}],\"image\":\"quay.io/armosec/k8s-ca-websocket-ubi:406\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-websocket\",\"ports\":[{\"containerPort\":4002,\"name\":\"trigger-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:43Z", - "generation": 1, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-websocket\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_DEBUG_SIGNER\"}": { - ".": {}, - "f:name": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_VULN_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:14Z" - } - ], - "name": "ca-websocket", - "namespace": "cyberarmor-system", - "resourceVersion": "60787065", - "uid": "914f30e9-d858-4945-9314-cbd3422ebaab" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-websocket" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_VULN_SCAN_SCHEDULE", - "value": "@every 11h" - }, - { - "name": "CA_POSTURE_SCAN_SCHEDULE", - "value": "@every 12h" - }, - { - "name": "CA_DEBUG_SIGNER" - } - ], - "image": "quay.io/armosec/k8s-ca-websocket-ubi:406", - "imagePullPolicy": "Always", - "name": "ca-websocket", - "ports": [ - { - "containerPort": 4002, - "name": "trigger-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "1000Mi" - }, - "requests": { - "cpu": "300m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:14Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:43Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "ReplicaSet \"ca-websocket-857758846f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"adservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"adservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"adservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/adservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"name\":\"server\",\"ports\":[{\"containerPort\":9555}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"180Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:51Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":9555,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:12Z" - } - ], - "name": "adservice", - "namespace": "hipster", - "resourceVersion": "61263240", - "uid": "368bea36-82be-4c28-8607-cf931a836185" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "adservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6415784d-d96b-4866-9c10-d571c8d8fd35", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:29", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-adservice" - }, - "creationTimestamp": null, - "labels": { - "app": "adservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/adservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 9555, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "300Mi" - }, - "requests": { - "cpu": "200m", - "memory": "180Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:24Z", - "lastUpdateTime": "2021-10-12T00:12:24Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:51Z", - "lastUpdateTime": "2021-10-13T00:28:12Z", - "message": "ReplicaSet \"adservice-7864446d5c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"cartservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"cartservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"cartservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"REDIS_ADDR\",\"value\":\"redis-cart:6379\"}],\"image\":\"gcr.io/google-samples/microservices-demo/cartservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15,\"periodSeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":7070}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:47Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"REDIS_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7070,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T09:40:08Z" - } - ], - "name": "cartservice", - "namespace": "hipster", - "resourceVersion": "61443544", - "uid": "df767287-ffc1-4559-b7fd-32b09bf6208c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "cartservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "7ced7c5c-c483-40b3-b6bc-8829339dc3e1", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:04", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-cartservice" - }, - "creationTimestamp": null, - "labels": { - "app": "cartservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "REDIS_ADDR", - "value": "redis-cart:6379" - } - ], - "image": "gcr.io/google-samples/microservices-demo/cartservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7070, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "128Mi" - }, - "requests": { - "cpu": "200m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-13T00:27:35Z", - "message": "ReplicaSet \"cartservice-7c8f8f9ddd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T09:40:08Z", - "lastUpdateTime": "2021-10-13T09:40:08Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"checkoutservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"checkoutservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"checkoutservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"5050\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"PAYMENT_SERVICE_ADDR\",\"value\":\"paymentservice:50051\"},{\"name\":\"EMAIL_SERVICE_ADDR\",\"value\":\"emailservice:5000\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"}],\"image\":\"gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":5050}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:42Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EMAIL_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PAYMENT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":5050,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:42Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:41Z" - } - ], - "name": "checkoutservice", - "namespace": "hipster", - "resourceVersion": "61262985", - "uid": "b5e6a8d8-1ec6-4acc-bf14-e3bb28bff284" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "checkoutservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "bebad8bb-8728-4813-ae19-d22a38a289a5", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:28", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-checkoutservice" - }, - "creationTimestamp": null, - "labels": { - "app": "checkoutservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "5050" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "PAYMENT_SERVICE_ADDR", - "value": "paymentservice:50051" - }, - { - "name": "EMAIL_SERVICE_ADDR", - "value": "emailservice:5000" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - } - ], - "image": "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 5050, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T14:05:32Z", - "lastUpdateTime": "2021-10-12T14:05:32Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:42Z", - "lastUpdateTime": "2021-10-13T00:27:42Z", - "message": "ReplicaSet \"checkoutservice-86c564466c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"currencyservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"currencyservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"currencyservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"7000\"}],\"image\":\"gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":7000,\"name\":\"grpc\"}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T08:37:54Z" - } - ], - "name": "currencyservice", - "namespace": "hipster", - "resourceVersion": "61423238", - "uid": "167b75e1-1be2-4764-aaad-dbb1ae248d3c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "currencyservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "4aa34494-0348-4859-9e29-56df9baf52ba", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-currencyservice" - }, - "creationTimestamp": null, - "labels": { - "app": "currencyservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "7000" - } - ], - "image": "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7000, - "name": "grpc", - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:29:19Z", - "message": "ReplicaSet \"currencyservice-544b6d849c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T08:37:54Z", - "lastUpdateTime": "2021-10-13T08:37:54Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"emailservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"emailservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"emailservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"DISABLE_PROFILER\",\"value\":\"1\"}],\"image\":\"gcr.io/google-samples/microservices-demo/emailservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:41Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"DISABLE_PROFILER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:41Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:07Z" - } - ], - "name": "emailservice", - "namespace": "hipster", - "resourceVersion": "61263204", - "uid": "9959433f-c964-4e6d-a2d7-3d1b9b617948" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "emailservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "e8aa9826-2367-44e1-9aad-a6d617b0fa06", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:48", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-emailservice" - }, - "creationTimestamp": null, - "labels": { - "app": "emailservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "DISABLE_PROFILER", - "value": "1" - } - ], - "image": "gcr.io/google-samples/microservices-demo/emailservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-12T00:11:47Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:41Z", - "lastUpdateTime": "2021-10-13T00:28:08Z", - "message": "ReplicaSet \"emailservice-cc7c4cd87\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"frontend\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"frontend\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"frontend\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"},{\"name\":\"RECOMMENDATION_SERVICE_ADDR\",\"value\":\"recommendationservice:8080\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"CHECKOUT_SERVICE_ADDR\",\"value\":\"checkoutservice:5050\"},{\"name\":\"AD_SERVICE_ADDR\",\"value\":\"adservice:9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/frontend:v0.2.3\",\"livenessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-liveness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-readiness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:44Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AD_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CHECKOUT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"RECOMMENDATION_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:44Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:34Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:22Z" - } - ], - "name": "frontend", - "namespace": "hipster", - "resourceVersion": "61263336", - "uid": "86b92d9e-22ad-4f0a-be26-41343f05f0d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "frontend" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9611f05f-4a8b-48ff-9722-e6a2ec702d65", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:57", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-frontend", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "frontend", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - }, - { - "name": "RECOMMENDATION_SERVICE_ADDR", - "value": "recommendationservice:8080" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "CHECKOUT_SERVICE_ADDR", - "value": "checkoutservice:5050" - }, - { - "name": "AD_SERVICE_ADDR", - "value": "adservice:9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/frontend:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-liveness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-readiness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:04Z", - "lastUpdateTime": "2021-10-12T00:12:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:44Z", - "lastUpdateTime": "2021-10-13T00:28:23Z", - "message": "ReplicaSet \"frontend-c747f6f47\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"loadgenerator\",\"namespace\":\"hipster\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"loadgenerator\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"loadgenerator\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"FRONTEND_ADDR\",\"value\":\"frontend:80\"},{\"name\":\"USERS\",\"value\":\"10\"}],\"image\":\"gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3\",\"name\":\"main\",\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"256Mi\"}}}],\"restartPolicy\":\"Always\",\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"main\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"FRONTEND_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"USERS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:38Z" - } - ], - "name": "loadgenerator", - "namespace": "hipster", - "resourceVersion": "61263451", - "uid": "e9200650-d25d-43f2-b1bc-4615beaed50c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "loadgenerator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "baca3d0f-fdc8-42c6-a9b1-ee29b3d173e0", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:26", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-loadgenerator", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "loadgenerator", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "FRONTEND_ADDR", - "value": "frontend:80" - }, - { - "name": "USERS", - "value": "10" - } - ], - "image": "gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "name": "main", - "resources": { - "limits": { - "cpu": "500m", - "memory": "512Mi" - }, - "requests": { - "cpu": "300m", - "memory": "256Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-13T00:24:15Z", - "lastUpdateTime": "2021-10-13T00:24:15Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:28:38Z", - "message": "ReplicaSet \"loadgenerator-6dcb6ffc4f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"paymentservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"paymentservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"paymentservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:45Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:45Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:29:27Z" - } - ], - "name": "paymentservice", - "namespace": "hipster", - "resourceVersion": "61263785", - "uid": "ab21c30f-d153-4ea8-982e-e12a71745dae" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "paymentservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "60b5720d-99b5-47a0-8bc4-656b372a6d17", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:52", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-paymentservice" - }, - "creationTimestamp": null, - "labels": { - "app": "paymentservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:45Z", - "lastUpdateTime": "2021-10-13T00:29:27Z", - "message": "ReplicaSet \"paymentservice-849b876ffd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"productcatalogservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"productcatalogservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"productcatalogservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":3550}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:46Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":3550,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:57Z" - } - ], - "name": "productcatalogservice", - "namespace": "hipster", - "resourceVersion": "61263117", - "uid": "50b29b6e-0f97-43b8-9555-a53d9c0e18f9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "productcatalogservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9bb4cc06-3907-401b-919f-c2974a623068", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-productcatalogservice" - }, - "creationTimestamp": null, - "labels": { - "app": "productcatalogservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 3550, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:46Z", - "lastUpdateTime": "2021-10-13T00:27:57Z", - "message": "ReplicaSet \"productcatalogservice-586fd876d5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"recommendationservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"recommendationservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"recommendationservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"450Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"220Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:43Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:37Z" - } - ], - "name": "recommendationservice", - "namespace": "hipster", - "resourceVersion": "61263443", - "uid": "00437f28-24c4-4759-ab93-f0be948eabc9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "recommendationservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "8cace306-b3ce-4f2f-8a6f-b122873b4eee", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-recommendationservice" - }, - "creationTimestamp": null, - "labels": { - "app": "recommendationservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "450Mi" - }, - "requests": { - "cpu": "100m", - "memory": "220Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-12T00:11:50Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:43Z", - "lastUpdateTime": "2021-10-13T00:28:37Z", - "message": "ReplicaSet \"recommendationservice-54b7b7b95d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"redis-cart\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"redis-cart\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"redis-cart\"}},\"spec\":{\"containers\":[{\"image\":\"redis:alpine\",\"livenessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"name\":\"redis\",\"ports\":[{\"containerPort\":6379}],\"readinessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"resources\":{\"limits\":{\"cpu\":\"125m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"70m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/data\",\"name\":\"redis-data\"}]}],\"volumes\":[{\"emptyDir\":{},\"name\":\"redis-data\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:50Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"redis\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":6379,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/data\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"redis-data\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:38Z" - } - ], - "name": "redis-cart", - "namespace": "hipster", - "resourceVersion": "61262948", - "uid": "76b3aebb-9ec5-479e-81ae-975ccf1bc6ec" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "redis-cart" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "838a7c21-618b-4693-a13b-838a9231ca58", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-redis-cart" - }, - "creationTimestamp": null, - "labels": { - "app": "redis-cart", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "image": "redis:alpine", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "name": "redis", - "ports": [ - { - "containerPort": 6379, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "125m", - "memory": "256Mi" - }, - "requests": { - "cpu": "70m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/data", - "name": "redis-data" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "emptyDir": {}, - "name": "redis-data" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:57Z", - "lastUpdateTime": "2021-10-12T00:11:57Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-13T00:27:38Z", - "message": "ReplicaSet \"redis-cart-594778c8b9\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"shippingservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"shippingservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"shippingservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:49Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:49Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:11Z" - } - ], - "name": "shippingservice", - "namespace": "hipster", - "resourceVersion": "61262726", - "uid": "febd2fe5-0e28-448e-aabd-31904ebb82a9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "shippingservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6503b850-839c-4b73-95ab-195d27b3c10d", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:26:58", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-shippingservice" - }, - "creationTimestamp": null, - "labels": { - "app": "shippingservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:00Z", - "lastUpdateTime": "2021-10-12T00:12:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:49Z", - "lastUpdateTime": "2021-10-13T00:27:11Z", - "message": "ReplicaSet \"shippingservice-758c9b4d4b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":\"10%\",\"maxUnavailable\":0}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"kubedns\",\"prometheus.io/port\":\"10054\",\"prometheus.io/scrape\":\"true\",\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"labels\":{\"k8s-app\":\"kube-dns\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchExpressions\":[{\"key\":\"k8s-app\",\"operator\":\"In\",\"values\":[\"kube-dns\"]}]},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"--domain=cluster.local.\",\"--dns-port=10053\",\"--config-dir=/kube-dns-config\",\"--v=2\"],\"env\":[{\"name\":\"PROMETHEUS_PORT\",\"value\":\"10055\"}],\"image\":\"gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/kubedns\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"kubedns\",\"ports\":[{\"containerPort\":10053,\"name\":\"dns-local\",\"protocol\":\"UDP\"},{\"containerPort\":10053,\"name\":\"dns-tcp-local\",\"protocol\":\"TCP\"},{\"containerPort\":10055,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readiness\",\"port\":8081,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":3,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"memory\":\"210Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"70Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001},\"volumeMounts\":[{\"mountPath\":\"/kube-dns-config\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"-v=2\",\"-logtostderr\",\"-configDir=/etc/k8s/dns/dnsmasq-nanny\",\"-restartDnsmasq=true\",\"--\",\"-k\",\"--cache-size=1000\",\"--no-negcache\",\"--dns-forward-max=1500\",\"--log-facility=-\",\"--server=/cluster.local/127.0.0.1#10053\",\"--server=/in-addr.arpa/127.0.0.1#10053\",\"--server=/ip6.arpa/127.0.0.1#10053\"],\"image\":\"gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/dnsmasq\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"dnsmasq\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"150m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"capabilities\":{\"add\":[\"NET_BIND_SERVICE\",\"SETGID\"],\"drop\":[\"all\"]}},\"volumeMounts\":[{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"--v=2\",\"--logtostderr\",\"--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV\",\"--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV\"],\"image\":\"gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/metrics\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"sidecar\",\"ports\":[{\"containerPort\":10054,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001}}],\"dnsPolicy\":\"Default\",\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 4, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:scheduler.alpha.kubernetes.io/critical-pod": {}, - "f:seccomp.security.alpha.kubernetes.io/pod": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:podAntiAffinity": { - ".": {}, - "f:preferredDuringSchedulingIgnoredDuringExecution": {} - } - }, - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:capabilities": { - ".": {}, - "f:add": {}, - "f:drop": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"kubedns\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PROMETHEUS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10053,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10053,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10055,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/kube-dns-config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"sidecar\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10054,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - "f:image": {} - }, - "k:{\"name\":\"kubedns\"}": { - "f:image": {} - }, - "k:{\"name\":\"sidecar\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:06:26Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "53109905", - "uid": "cd5cca24-7cd2-4548-a5d3-d90beb79f9e8" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 2, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "10%", - "maxUnavailable": 0 - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "kubedns", - "prometheus.io/port": "10054", - "prometheus.io/scrape": "true", - "scheduler.alpha.kubernetes.io/critical-pod": "", - "seccomp.security.alpha.kubernetes.io/pod": "runtime/default" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns" - } - }, - "spec": { - "affinity": { - "podAntiAffinity": { - "preferredDuringSchedulingIgnoredDuringExecution": [ - { - "podAffinityTerm": { - "labelSelector": { - "matchExpressions": [ - { - "key": "k8s-app", - "operator": "In", - "values": [ - "kube-dns" - ] - } - ] - }, - "topologyKey": "kubernetes.io/hostname" - }, - "weight": 100 - } - ] - } - }, - "containers": [ - { - "args": [ - "--domain=cluster.local.", - "--dns-port=10053", - "--config-dir=/kube-dns-config", - "--v=2" - ], - "env": [ - { - "name": "PROMETHEUS_PORT", - "value": "10055" - } - ], - "image": "gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/kubedns", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "kubedns", - "ports": [ - { - "containerPort": 10053, - "name": "dns-local", - "protocol": "UDP" - }, - { - "containerPort": 10053, - "name": "dns-tcp-local", - "protocol": "TCP" - }, - { - "containerPort": 10055, - "name": "metrics", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/readiness", - "port": 8081, - "scheme": "HTTP" - }, - "initialDelaySeconds": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "resources": { - "limits": { - "memory": "210Mi" - }, - "requests": { - "cpu": "100m", - "memory": "70Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/kube-dns-config", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "-v=2", - "-logtostderr", - "-configDir=/etc/k8s/dns/dnsmasq-nanny", - "-restartDnsmasq=true", - "--", - "-k", - "--cache-size=1000", - "--no-negcache", - "--dns-forward-max=1500", - "--log-facility=-", - "--server=/cluster.local/127.0.0.1#10053", - "--server=/in-addr.arpa/127.0.0.1#10053", - "--server=/ip6.arpa/127.0.0.1#10053" - ], - "image": "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/dnsmasq", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "dnsmasq", - "ports": [ - { - "containerPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "150m", - "memory": "20Mi" - } - }, - "securityContext": { - "capabilities": { - "add": [ - "NET_BIND_SERVICE", - "SETGID" - ], - "drop": [ - "all" - ] - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/k8s/dns/dnsmasq-nanny", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "--v=2", - "--logtostderr", - "--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV", - "--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV" - ], - "image": "gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/metrics", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "sidecar", - "ports": [ - { - "containerPort": 10054, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns", - "serviceAccountName": "kube-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 2, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-09-11T01:57:38Z", - "message": "ReplicaSet \"kube-dns-59844ff879\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:06:26Z", - "lastUpdateTime": "2021-09-25T17:06:26Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 4, - "readyReplicas": 2, - "replicas": 2, - "updatedReplicas": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns-autoscaler\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns-autoscaler\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"spec\":{\"containers\":[{\"command\":[\"/cluster-proportional-autoscaler\",\"--namespace=kube-system\",\"--configmap=kube-dns-autoscaler\",\"--target=Deployment/kube-dns\",\"--default-params={\\\"linear\\\":{\\\"coresPerReplica\\\":256,\\\"nodesPerReplica\\\":16,\\\"preventSinglePointFailure\\\":true,\\\"includeUnschedulableNodes\\\":true}}\",\"--logtostderr=true\",\"--v=2\"],\"image\":\"gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0\",\"name\":\"autoscaler\",\"resources\":{\"requests\":{\"cpu\":\"20m\",\"memory\":\"10Mi\"}}}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"seccompProfile\":{\"type\":\"RuntimeDefault\"},\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns-autoscaler\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns-autoscaler", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"autoscaler\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:02:52Z" - } - ], - "name": "kube-dns-autoscaler", - "namespace": "kube-system", - "resourceVersion": "53108562", - "uid": "c84ce079-f3c8-46ba-871f-0f2d42ffee1e" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/cluster-proportional-autoscaler", - "--namespace=kube-system", - "--configmap=kube-dns-autoscaler", - "--target=Deployment/kube-dns", - "--default-params={\"linear\":{\"coresPerReplica\":256,\"nodesPerReplica\":16,\"preventSinglePointFailure\":true,\"includeUnschedulableNodes\":true}}", - "--logtostderr=true", - "--v=2" - ], - "image": "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "autoscaler", - "resources": { - "requests": { - "cpu": "20m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "seccompProfile": { - "type": "RuntimeDefault" - }, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns-autoscaler", - "serviceAccountName": "kube-dns-autoscaler", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:54:39Z", - "message": "ReplicaSet \"kube-dns-autoscaler-844c9d9448\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:02:52Z", - "lastUpdateTime": "2021-09-25T17:02:52Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"glbc\",\"kubernetes.io/cluster-service\":\"true\",\"kubernetes.io/name\":\"GLBC\"},\"name\":\"l7-default-backend\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"glbc\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"glbc\",\"name\":\"glbc\"}},\"spec\":{\"containers\":[{\"image\":\"k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":30,\"timeoutSeconds\":5},\"name\":\"default-http-backend\",\"ports\":[{\"containerPort\":8080}],\"resources\":{\"limits\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}}}],\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"tolerations\":[{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "glbc", - "kubernetes.io/cluster-service": "true", - "kubernetes.io/name": "GLBC" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:kubernetes.io/name": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:name": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"default-http-backend\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:seccompProfile": { - "f:type": {} - } - }, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:01:20Z" - } - ], - "name": "l7-default-backend", - "namespace": "kube-system", - "resourceVersion": "53107969", - "uid": "32a76c03-37a1-44e9-b293-dd6b46ed274b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "glbc" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "glbc", - "name": "glbc" - } - }, - "spec": { - "containers": [ - { - "image": "k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 30, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "default-http-backend", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "10m", - "memory": "20Mi" - }, - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:56:25Z", - "message": "ReplicaSet \"l7-default-backend-56cb9644f6\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:01:20Z", - "lastUpdateTime": "2021-09-25T17:01:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "24", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metrics-server\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server-v0.3.6\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server\"},\"spec\":{\"containers\":[{\"command\":[\"/metrics-server\",\"--metric-resolution=30s\",\"--kubelet-port=10255\",\"--deprecated-kubelet-completely-insecure=true\",\"--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP\"],\"image\":\"k8s.gcr.io/metrics-server-amd64:v0.3.6\",\"name\":\"metrics-server\",\"ports\":[{\"containerPort\":443,\"name\":\"https\",\"protocol\":\"TCP\"}]},{\"command\":[\"/pod_nanny\",\"--config-dir=/etc/config\",\"--cpu=40m\",\"--extra-cpu=0.5m\",\"--memory=35Mi\",\"--extra-memory=4Mi\",\"--threshold=5\",\"--deployment=metrics-server-v0.3.6\",\"--container=metrics-server\",\"--poll-period=300000\",\"--estimator=exponential\",\"--scale-down-delay=24h\",\"--minClusterSize=5\",\"--use-metrics=true\"],\"env\":[{\"name\":\"MY_POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"MY_POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"gke.gcr.io/addon-resizer:1.8.11-gke.0\",\"name\":\"metrics-server-nanny\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"5m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"metrics-server-config-volume\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"metrics-server\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"metrics-server-config\"},\"name\":\"metrics-server-config-volume\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 24, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metrics-server", - "kubernetes.io/cluster-service": "true", - "version": "v0.3.6" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:version": {} - }, - "f:name": {} - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - }, - "k:{\"name\":\"metrics-server-nanny\"}": { - ".": {}, - "f:command": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"MY_POD_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"MY_POD_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"metrics-server-config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - "f:resources": { - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - } - } - } - } - } - } - }, - "manager": "pod_nanny", - "operation": "Update", - "time": "2021-06-13T13:42:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-26T17:13:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-26T17:13:52Z" - } - ], - "name": "metrics-server-v0.3.6", - "namespace": "kube-system", - "resourceVersion": "53582788", - "uid": "872d0f34-7998-45d3-9eea-570e0a47e03c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - }, - "name": "metrics-server" - }, - "spec": { - "containers": [ - { - "command": [ - "/metrics-server", - "--metric-resolution=30s", - "--kubelet-port=10255", - "--deprecated-kubelet-completely-insecure=true", - "--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP" - ], - "image": "k8s.gcr.io/metrics-server-amd64:v0.3.6", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server", - "ports": [ - { - "containerPort": 443, - "name": "https", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "44m", - "memory": "63Mi" - }, - "requests": { - "cpu": "44m", - "memory": "63Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - }, - { - "command": [ - "/pod_nanny", - "--config-dir=/etc/config", - "--cpu=40m", - "--extra-cpu=0.5m", - "--memory=35Mi", - "--extra-memory=4Mi", - "--threshold=5", - "--deployment=metrics-server-v0.3.6", - "--container=metrics-server", - "--poll-period=300000", - "--estimator=exponential", - "--scale-down-delay=24h", - "--minClusterSize=5", - "--use-metrics=true" - ], - "env": [ - { - "name": "MY_POD_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.name" - } - } - }, - { - "name": "MY_POD_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - } - ], - "image": "gke.gcr.io/addon-resizer:1.8.11-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server-nanny", - "resources": { - "limits": { - "cpu": "100m", - "memory": "300Mi" - }, - "requests": { - "cpu": "5m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "metrics-server-config-volume" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "serviceAccount": "metrics-server", - "serviceAccountName": "metrics-server", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "metrics-server-config" - }, - "name": "metrics-server-config-volume" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-09-25T17:12:33Z", - "lastUpdateTime": "2021-09-25T17:12:33Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-06-13T13:42:20Z", - "lastUpdateTime": "2021-09-26T17:13:52Z", - "message": "ReplicaSet \"metrics-server-v0.3.6-7889654bbb\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 24, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "6", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-proxy\"},\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-proxy\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-proxy\"}},\"spec\":{\"containers\":[{\"command\":[\"/bin/sh\",\"-c\",\"kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\\u003e\\u003e/var/log/kube-proxy.log 2\\u003e\\u00261\"],\"env\":[{\"name\":\"KUBERNETES_SERVICE_HOST\",\"value\":\"34.78.97.243\"}],\"image\":\"gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001\",\"name\":\"kube-proxy\",\"resources\":{\"requests\":{\"cpu\":\"100m\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/log\",\"name\":\"varlog\",\"readOnly\":false},{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/lib/modules\",\"name\":\"lib-modules\",\"readOnly\":true}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\",\"node.kubernetes.io/kube-proxy-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"kube-proxy\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/log\"},\"name\":\"varlog\"},{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"hostPath\":{\"path\":\"/lib/modules\"},\"name\":\"lib-modules\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "generation": 6, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-proxy" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBERNETES_SERVICE_HOST\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/kube-proxy-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - "f:command": {}, - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:44Z" - } - ], - "name": "kube-proxy", - "namespace": "kube-system", - "resourceVersion": "52161714", - "uid": "bb6f9ab0-e586-407b-95c0-773637c696e8" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-proxy" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-proxy" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "env": [ - { - "name": "KUBERNETES_SERVICE_HOST", - "value": "34.78.97.243" - } - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux", - "node.kubernetes.io/kube-proxy-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "kube-proxy", - "serviceAccountName": "kube-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 6 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"},\"name\":\"metadata-proxy-v0.1\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metadata-proxy\",\"version\":\"v0.1\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"}},\"spec\":{\"containers\":[{\"args\":[\"--addr=0.0.0.0:988\"],\"image\":\"k8s.gcr.io/metadata-proxy:v0.1.12\",\"name\":\"metadata-proxy\",\"resources\":{\"limits\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"},\"requests\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"}},\"securityContext\":{\"privileged\":true}}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"cloud.google.com/metadata-proxy-ready\":\"true\",\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"metadata-proxy\",\"terminationGracePeriodSeconds\":30,\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 3, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:cloud.google.com/metadata-proxy-ready": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - "f:args": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - } - ], - "name": "metadata-proxy-v0.1", - "namespace": "kube-system", - "resourceVersion": "25934435", - "uid": "94bf5845-f77b-47d4-bcec-e78549b4d8a3" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metadata-proxy", - "version": "v0.1" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--addr=0.0.0.0:988" - ], - "image": "k8s.gcr.io/metadata-proxy:v0.1.12", - "imagePullPolicy": "IfNotPresent", - "name": "metadata-proxy", - "resources": { - "limits": { - "cpu": "30m", - "memory": "25Mi" - }, - "requests": { - "cpu": "30m", - "memory": "25Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "cloud.google.com/metadata-proxy-ready": "true", - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "metadata-proxy", - "serviceAccountName": "metadata-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 3 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"node-local-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"node-local-dns\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"nodelocaldns\",\"components.gke.io/component-version\":\"1.4.0\",\"prometheus.io/port\":\"9253\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"k8s-app\":\"node-local-dns\"}},\"spec\":{\"containers\":[{\"args\":[\"-localip\",\"169.254.20.10,10.72.0.10\",\"-conf\",\"/etc/Corefile\",\"-upstreamsvc\",\"kube-dns-upstream\",\"-kubednscm\",\"/etc/kube-dns\"],\"image\":\"gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1\",\"livenessProbe\":{\"httpGet\":{\"host\":\"169.254.20.10\",\"path\":\"/health\",\"port\":8080},\"initialDelaySeconds\":60,\"timeoutSeconds\":5},\"name\":\"node-cache\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"},{\"containerPort\":9253,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"25m\",\"memory\":\"5Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/etc/coredns\",\"name\":\"config-volume\"},{\"mountPath\":\"/etc/kube-dns\",\"name\":\"kube-dns-config\"}]}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"addon.gke.io/node-local-dns-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"node-local-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"},{\"configMap\":{\"items\":[{\"key\":\"Corefile\",\"path\":\"Corefile.base\"}],\"name\":\"node-local-dns\"},\"name\":\"config-volume\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"}}}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "node-local-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:host": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":9253,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/coredns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/kube-dns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:addon.gke.io/node-local-dns-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "53114241", - "uid": "5069e9ba-0784-41bf-9577-3757bcb3b6d6" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "node-local-dns" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "nodelocaldns", - "components.gke.io/component-version": "1.4.0", - "prometheus.io/port": "9253", - "prometheus.io/scrape": "true" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "node-local-dns" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-localip", - "169.254.20.10,10.72.0.10", - "-conf", - "/etc/Corefile", - "-upstreamsvc", - "kube-dns-upstream", - "-kubednscm", - "/etc/kube-dns" - ], - "image": "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "host": "169.254.20.10", - "path": "/health", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "node-cache", - "ports": [ - { - "containerPort": 53, - "hostPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "hostPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - }, - { - "containerPort": 9253, - "hostPort": 9253, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "25m", - "memory": "5Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/etc/coredns", - "name": "config-volume" - }, - { - "mountPath": "/etc/kube-dns", - "name": "kube-dns-config" - } - ] - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "addon.gke.io/node-local-dns-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "node-local-dns", - "serviceAccountName": "node-local-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "Corefile", - "path": "Corefile.base" - } - ], - "name": "node-local-dns" - }, - "name": "config-volume" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 2, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"nvidia-gpu-device-plugin\"},\"name\":\"nvidia-gpu-device-plugin\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"cloud.google.com/gke-accelerator\",\"operator\":\"Exists\"}]}]}}},\"containers\":[{\"command\":[\"/usr/bin/nvidia-gpu-device-plugin\",\"-logtostderr\",\"--enable-container-gpu-metrics\",\"--enable-health-monitoring\"],\"env\":[{\"name\":\"LD_LIBRARY_PATH\",\"value\":\"/usr/local/nvidia/lib64\"}],\"image\":\"gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317\",\"name\":\"nvidia-gpu-device-plugin\",\"ports\":[{\"containerPort\":2112,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/device-plugin\",\"name\":\"device-plugin\"},{\"mountPath\":\"/dev\",\"name\":\"dev\"},{\"mountPath\":\"/usr/local/nvidia\",\"name\":\"nvidia\"},{\"mountPath\":\"/var/lib/kubelet/pod-resources\",\"name\":\"pod-resources\"},{\"mountPath\":\"/proc\",\"name\":\"proc\"},{\"mountPath\":\"/etc/nvidia\",\"name\":\"nvidia-config\"}]}],\"priorityClassName\":\"system-node-critical\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/device-plugins\"},\"name\":\"device-plugin\"},{\"hostPath\":{\"path\":\"/dev\"},\"name\":\"dev\"},{\"hostPath\":{\"path\":\"/home/kubernetes/bin/nvidia\",\"type\":\"Directory\"},\"name\":\"nvidia\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/pod-resources\"},\"name\":\"pod-resources\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"proc\"},{\"hostPath\":{\"path\":\"/etc/nvidia\"},\"name\":\"nvidia-config\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:17Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "nvidia-gpu-device-plugin" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:nodeAffinity": { - ".": {}, - "f:requiredDuringSchedulingIgnoredDuringExecution": { - ".": {}, - "f:nodeSelectorTerms": {} - } - } - }, - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"LD_LIBRARY_PATH\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":2112,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/device-plugin\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/local/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet/pod-resources\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"dev\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"device-plugin\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"nvidia\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"pod-resources\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - "f:command": {}, - "f:image": {}, - "f:volumeMounts": { - "k:{\"mountPath\":\"/etc/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/proc\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:volumes": { - "k:{\"name\":\"nvidia-config\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"proc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "nvidia-gpu-device-plugin", - "namespace": "kube-system", - "resourceVersion": "25934477", - "uid": "14396a20-ecee-4671-aefe-2a5b9d2e0dde" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "spec": { - "affinity": { - "nodeAffinity": { - "requiredDuringSchedulingIgnoredDuringExecution": { - "nodeSelectorTerms": [ - { - "matchExpressions": [ - { - "key": "cloud.google.com/gke-accelerator", - "operator": "Exists" - } - ] - } - ] - } - } - }, - "containers": [ - { - "command": [ - "/usr/bin/nvidia-gpu-device-plugin", - "-logtostderr", - "--enable-container-gpu-metrics", - "--enable-health-monitoring" - ], - "env": [ - { - "name": "LD_LIBRARY_PATH", - "value": "/usr/local/nvidia/lib64" - } - ], - "image": "gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317", - "imagePullPolicy": "IfNotPresent", - "name": "nvidia-gpu-device-plugin", - "ports": [ - { - "containerPort": 2112, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "20Mi" - }, - "requests": { - "cpu": "50m", - "memory": "20Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/device-plugin", - "name": "device-plugin" - }, - { - "mountPath": "/dev", - "name": "dev" - }, - { - "mountPath": "/usr/local/nvidia", - "name": "nvidia" - }, - { - "mountPath": "/var/lib/kubelet/pod-resources", - "name": "pod-resources" - }, - { - "mountPath": "/proc", - "name": "proc" - }, - { - "mountPath": "/etc/nvidia", - "name": "nvidia-config" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/device-plugins", - "type": "" - }, - "name": "device-plugin" - }, - { - "hostPath": { - "path": "/dev", - "type": "" - }, - "name": "dev" - }, - { - "hostPath": { - "path": "/home/kubernetes/bin/nvidia", - "type": "Directory" - }, - "name": "nvidia" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/pod-resources", - "type": "" - }, - "name": "pod-resources" - }, - { - "hostPath": { - "path": "/proc", - "type": "" - }, - "name": "proc" - }, - { - "hostPath": { - "path": "/etc/nvidia", - "type": "" - }, - "name": "nvidia-config" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:02:45.009201226Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:02:48Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"6de798cc-d558-479a-8ef4-38363e434633\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.63\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:02:55Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-5naq", - "uid": "6de798cc-d558-479a-8ef4-38363e434633" - } - ], - "resourceVersion": "53108585", - "uid": "fdd66d80-d09d-4b43-a291-b3797c7a5864" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-5naq", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://50767376b8a42b7a390e84c5c451d1485b1a562873b915100dc605bbcc49c1c5", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:02:48Z" - } - } - } - ], - "hostIP": "10.132.0.63", - "phase": "Running", - "podIP": "10.132.0.63", - "podIPs": [ - { - "ip": "10.132.0.63" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:02:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:09:05.595580038Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:09:09Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"d288c56c-2a00-42fe-b2ea-b8761fec2a4e\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.193\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:09:16Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-abj3", - "uid": "d288c56c-2a00-42fe-b2ea-b8761fec2a4e" - } - ], - "resourceVersion": "53110982", - "uid": "0866b060-d7a6-40bc-9ed9-292fbce958e9" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-abj3", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b04121a3de085254493b48dbe1be551abd021877d1c098afbd19e6429df8f4ba", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:09:08Z" - } - } - } - ], - "hostIP": "10.132.15.193", - "phase": "Running", - "podIP": "10.132.15.193", - "podIPs": [ - { - "ip": "10.132.15.193" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:09:06Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:56:27.195784979Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:56:29Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"9aa58d78-0147-4564-9900-0409a6bec341\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.61\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:56:37Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-enr8", - "uid": "9aa58d78-0147-4564-9900-0409a6bec341" - } - ], - "resourceVersion": "53106105", - "uid": "b940e7b5-9e7f-4ac7-a3ee-6c6655c1e65a" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-enr8", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b9375aed4bc463ecfa5fcfb0cfb3b55d087416bfe0c3267c1395e8f93569d03c", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:56:29Z" - } - } - } - ], - "hostIP": "10.132.0.61", - "phase": "Running", - "podIP": "10.132.0.61", - "podIPs": [ - { - "ip": "10.132.0.61" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:56:28Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:59:41.285621877Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:59:44Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"c1ab3c15-9764-40f5-ba6b-82556dc98ea2\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.62\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:59:52Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-oq2w", - "uid": "c1ab3c15-9764-40f5-ba6b-82556dc98ea2" - } - ], - "resourceVersion": "53107378", - "uid": "19e52dea-6339-4ed7-8e32-3d39b242d133" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-oq2w", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://a0b27bef16953a38c48075124547583280bccf28d1d6cf54c3b3e754e2847c86", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:59:44Z" - } - } - } - ], - "hostIP": "10.132.0.62", - "phase": "Running", - "podIP": "10.132.0.62", - "podIPs": [ - { - "ip": "10.132.0.62" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:59:42Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:12:12.095932889Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:12:15Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"7042c0e8-8dc5-4d1d-8b36-92c692c31c76\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.194\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:12:22Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-rgdp", - "uid": "7042c0e8-8dc5-4d1d-8b36-92c692c31c76" - } - ], - "resourceVersion": "53112149", - "uid": "5248c280-7bde-4fe9-a74e-56ae25abb0d2" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-rgdp", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://fd91ae480585a78c59ef401dc852d58921e76693ecbd908d98e4b63da6c298ff", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:12:14Z" - } - } - } - ], - "hostIP": "10.132.15.194", - "phase": "Running", - "podIP": "10.132.15.194", - "podIPs": [ - { - "ip": "10.132.15.194" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:12:13Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:05:45.558688986Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:05:49Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"a58f61e7-9d9e-4266-90d4-16b9969cb373\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.192\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:05:56Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-x940", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-x940", - "uid": "a58f61e7-9d9e-4266-90d4-16b9969cb373" - } - ], - "resourceVersion": "53109692", - "uid": "71a05734-f741-4b7e-82fe-765c555b3607" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-x940", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://6abab671623159f7174321118f58600f8955267a139a72508e9a73631ef7920d", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:05:48Z" - } - } - } - ], - "hostIP": "10.132.15.192", - "phase": "Running", - "podIP": "10.132.15.192", - "podIPs": [ - { - "ip": "10.132.15.192" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:05:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:15:06.466708143Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:15:10Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"65f37105-dd71-428b-bf8b-0e82b88027f1\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.195\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:15:17Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-zzyg", - "uid": "65f37105-dd71-428b-bf8b-0e82b88027f1" - } - ], - "resourceVersion": "53113200", - "uid": "dac23622-ae54-4a1a-a6ca-3c020911966e" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-zzyg", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://ee309dad5cb7047fcbd7eb0401760ccb4bd986080ab11c860911e37b132a2a5c", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:15:09Z" - } - } - } - ], - "hostIP": "10.132.15.195", - "phase": "Running", - "podIP": "10.132.15.195", - "podIPs": [ - { - "ip": "10.132.15.195" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:15:07Z" - } - } - ], - "listInputKinds": null - } - ], - "remediation": "Check and remove all unnecessary capabilities from the POD security context of the containers and use the exception mechanism to remove warnings where these capabilities are necessary.", - "description": "Giving dangerous and unnecessary LINUX capabilities to a container can increase the impact of the container compromise. This control identifies all the PODs with dangerous capabilities such as SYS_ADMIN and others.", - "score": 100 - }, - { - "guid": "", - "attributes": { - "armoBuiltin": true - }, - "id": "C-0046", - "controlID": "C-0046", - "name": "Insecure capabilities", - "ruleReports": [ - { - "name": "insecure-capabilities", - "remediation": "", - "ruleStatus": { - "status": "success", - "message": "" - }, - "ruleResponses": [ - { - "alertMessage": "container: dnsmasq in workload: kube-dns have dangerous capabilities", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":\"10%\",\"maxUnavailable\":0}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"kubedns\",\"prometheus.io/port\":\"10054\",\"prometheus.io/scrape\":\"true\",\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"labels\":{\"k8s-app\":\"kube-dns\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchExpressions\":[{\"key\":\"k8s-app\",\"operator\":\"In\",\"values\":[\"kube-dns\"]}]},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"--domain=cluster.local.\",\"--dns-port=10053\",\"--config-dir=/kube-dns-config\",\"--v=2\"],\"env\":[{\"name\":\"PROMETHEUS_PORT\",\"value\":\"10055\"}],\"image\":\"gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/kubedns\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"kubedns\",\"ports\":[{\"containerPort\":10053,\"name\":\"dns-local\",\"protocol\":\"UDP\"},{\"containerPort\":10053,\"name\":\"dns-tcp-local\",\"protocol\":\"TCP\"},{\"containerPort\":10055,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readiness\",\"port\":8081,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":3,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"memory\":\"210Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"70Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001},\"volumeMounts\":[{\"mountPath\":\"/kube-dns-config\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"-v=2\",\"-logtostderr\",\"-configDir=/etc/k8s/dns/dnsmasq-nanny\",\"-restartDnsmasq=true\",\"--\",\"-k\",\"--cache-size=1000\",\"--no-negcache\",\"--dns-forward-max=1500\",\"--log-facility=-\",\"--server=/cluster.local/127.0.0.1#10053\",\"--server=/in-addr.arpa/127.0.0.1#10053\",\"--server=/ip6.arpa/127.0.0.1#10053\"],\"image\":\"gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/dnsmasq\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"dnsmasq\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"150m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"capabilities\":{\"add\":[\"NET_BIND_SERVICE\",\"SETGID\"],\"drop\":[\"all\"]}},\"volumeMounts\":[{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"--v=2\",\"--logtostderr\",\"--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV\",\"--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV\"],\"image\":\"gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/metrics\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"sidecar\",\"ports\":[{\"containerPort\":10054,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001}}],\"dnsPolicy\":\"Default\",\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 4, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:scheduler.alpha.kubernetes.io/critical-pod": {}, - "f:seccomp.security.alpha.kubernetes.io/pod": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:podAntiAffinity": { - ".": {}, - "f:preferredDuringSchedulingIgnoredDuringExecution": {} - } - }, - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:capabilities": { - ".": {}, - "f:add": {}, - "f:drop": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"kubedns\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PROMETHEUS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10053,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10053,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10055,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/kube-dns-config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"sidecar\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10054,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - "f:image": {} - }, - "k:{\"name\":\"kubedns\"}": { - "f:image": {} - }, - "k:{\"name\":\"sidecar\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:06:26Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "53109905", - "uid": "cd5cca24-7cd2-4548-a5d3-d90beb79f9e8" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 2, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "10%", - "maxUnavailable": 0 - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "kubedns", - "prometheus.io/port": "10054", - "prometheus.io/scrape": "true", - "scheduler.alpha.kubernetes.io/critical-pod": "", - "seccomp.security.alpha.kubernetes.io/pod": "runtime/default" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns" - } - }, - "spec": { - "affinity": { - "podAntiAffinity": { - "preferredDuringSchedulingIgnoredDuringExecution": [ - { - "podAffinityTerm": { - "labelSelector": { - "matchExpressions": [ - { - "key": "k8s-app", - "operator": "In", - "values": [ - "kube-dns" - ] - } - ] - }, - "topologyKey": "kubernetes.io/hostname" - }, - "weight": 100 - } - ] - } - }, - "containers": [ - { - "args": [ - "--domain=cluster.local.", - "--dns-port=10053", - "--config-dir=/kube-dns-config", - "--v=2" - ], - "env": [ - { - "name": "PROMETHEUS_PORT", - "value": "10055" - } - ], - "image": "gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/kubedns", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "kubedns", - "ports": [ - { - "containerPort": 10053, - "name": "dns-local", - "protocol": "UDP" - }, - { - "containerPort": 10053, - "name": "dns-tcp-local", - "protocol": "TCP" - }, - { - "containerPort": 10055, - "name": "metrics", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/readiness", - "port": 8081, - "scheme": "HTTP" - }, - "initialDelaySeconds": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "resources": { - "limits": { - "memory": "210Mi" - }, - "requests": { - "cpu": "100m", - "memory": "70Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/kube-dns-config", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "-v=2", - "-logtostderr", - "-configDir=/etc/k8s/dns/dnsmasq-nanny", - "-restartDnsmasq=true", - "--", - "-k", - "--cache-size=1000", - "--no-negcache", - "--dns-forward-max=1500", - "--log-facility=-", - "--server=/cluster.local/127.0.0.1#10053", - "--server=/in-addr.arpa/127.0.0.1#10053", - "--server=/ip6.arpa/127.0.0.1#10053" - ], - "image": "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/dnsmasq", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "dnsmasq", - "ports": [ - { - "containerPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "150m", - "memory": "20Mi" - } - }, - "securityContext": { - "capabilities": { - "add": [ - "NET_BIND_SERVICE", - "SETGID" - ], - "drop": [ - "all" - ] - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/k8s/dns/dnsmasq-nanny", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "--v=2", - "--logtostderr", - "--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV", - "--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV" - ], - "image": "gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/metrics", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "sidecar", - "ports": [ - { - "containerPort": 10054, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns", - "serviceAccountName": "kube-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 2, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-09-11T01:57:38Z", - "message": "ReplicaSet \"kube-dns-59844ff879\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:06:26Z", - "lastUpdateTime": "2021-09-25T17:06:26Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 4, - "readyReplicas": 2, - "replicas": 2, - "updatedReplicas": 2 - } - } - ] - } - } - ], - "listInputResources": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-audit\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-audit\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CONFIG_FILES\",\"value\":\"/config/config.json\"},{\"name\":\"CA_SERVER_TYPE\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"cluster_kind\",\"name\":\"ca-audit\"}}}],\"image\":\"quay.io/armosec/k8s-ca-auditlog-ubi:21\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-audit\",\"ports\":[{\"containerPort\":443,\"name\":\"ca-audit-port\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/config\",\"name\":\"ca-audit\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-audit\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"config\",\"path\":\"config.json\"}],\"name\":\"ca-audit\"},\"name\":\"ca-audit\"},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:54Z", - "generation": 1, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CONFIG_FILES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_SERVER_TYPE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:54Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-audit", - "namespace": "cyberarmor-system", - "resourceVersion": "60787209", - "uid": "687f52ea-6956-4e8a-bb8c-7ea35a04b3f0" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-audit" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CONFIG_FILES", - "value": "/config/config.json" - }, - { - "name": "CA_SERVER_TYPE", - "valueFrom": { - "configMapKeyRef": { - "key": "cluster_kind", - "name": "ca-audit" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-auditlog-ubi:21", - "imagePullPolicy": "Always", - "name": "ca-audit", - "ports": [ - { - "containerPort": 443, - "name": "ca-audit-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/config", - "name": "ca-audit", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-audit", - "serviceAccountName": "ca-audit", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "config", - "path": "config.json" - } - ], - "name": "ca-audit" - }, - "name": "ca-audit" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:54Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-audit-c667df747\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-dashboard-aggregator\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-dashboard-aggregator\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-configtype=1\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-dashboard-aggregator\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"40Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:55Z", - "generation": 1, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-dashboard-aggregator\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:55Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T23:55:20Z" - } - ], - "name": "ca-dashboard-aggregator", - "namespace": "cyberarmor-system", - "resourceVersion": "61250607", - "uid": "0ba23569-e254-4388-b22f-30cc1eca031b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-dashboard-aggregator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-configtype=1", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173", - "imagePullPolicy": "Always", - "name": "ca-dashboard-aggregator", - "resources": { - "limits": { - "cpu": "200m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "40Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:18:55Z", - "lastUpdateTime": "2021-10-12T00:19:19Z", - "message": "ReplicaSet \"ca-dashboard-aggregator-5b8bdbc8f5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-12T23:55:20Z", - "lastUpdateTime": "2021-10-12T23:55:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-notification-server\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-notification-server\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"maserNotificationServer\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\",\"value\":\"customerGUID\"},{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\",\"value\":\"8001\"},{\"name\":\"CA_NOTIFICATION_SERVER_PORT\",\"value\":\"8002\"}],\"image\":\"quay.io/armosec/notification-server-ubi:89\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-notification-server\",\"ports\":[{\"containerPort\":8001,\"name\":\"websocket\"},{\"containerPort\":8002,\"name\":\"rest-api\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:59Z", - "generation": 1, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-notification-server\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8001,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:59Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:11Z" - } - ], - "name": "ca-notification-server", - "namespace": "cyberarmor-system", - "resourceVersion": "60787036", - "uid": "8c3dc6fe-e730-4364-8445-dc5a05ad2b0f" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-notification-server" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_HOST", - "valueFrom": { - "configMapKeyRef": { - "key": "maserNotificationServer", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_ATTRIBUTES", - "value": "customerGUID" - }, - { - "name": "CA_NOTIFICATION_SERVER_WS_PORT", - "value": "8001" - }, - { - "name": "CA_NOTIFICATION_SERVER_PORT", - "value": "8002" - } - ], - "image": "quay.io/armosec/notification-server-ubi:89", - "imagePullPolicy": "Always", - "name": "ca-notification-server", - "ports": [ - { - "containerPort": 8001, - "name": "websocket", - "protocol": "TCP" - }, - { - "containerPort": 8002, - "name": "rest-api", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "50Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:11Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:59Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "ReplicaSet \"ca-notification-server-6fd966c875\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-ocimage\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-ocimage\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-ocimage:63\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-ocimage\",\"ports\":[{\"containerPort\":8080,\"name\":\"ca-ocimage-port\"}],\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:51Z", - "generation": 1, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-ocimage\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:04Z" - } - ], - "name": "ca-ocimage", - "namespace": "cyberarmor-system", - "resourceVersion": "60786986", - "uid": "a6d37edf-b144-4677-91b3-73c73d9c7df6" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-ocimage" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-ocimage:63", - "imagePullPolicy": "Always", - "name": "ca-ocimage", - "ports": [ - { - "containerPort": 8080, - "name": "ca-ocimage-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "1", - "memory": "1000Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:04Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:51Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "ReplicaSet \"ca-ocimage-5576ff7d7d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-oracle\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-oracle\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_ORACLE_PORT\",\"value\":\"4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8002\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-oracle-ubi:11\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-oracle\",\"ports\":[{\"containerPort\":4000,\"name\":\"ca-oracle\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:19:01Z", - "generation": 1, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-oracle\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:19:01Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-oracle", - "namespace": "cyberarmor-system", - "resourceVersion": "60787203", - "uid": "da3dd21c-bf13-4d2a-97da-ca80b94d08d3" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-oracle" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_ORACLE_PORT", - "value": "4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8002" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-oracle-ubi:11", - "imagePullPolicy": "Always", - "name": "ca-oracle", - "ports": [ - { - "containerPort": 4000, - "name": "ca-oracle", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:19:01Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-oracle-6c98c6bdbf\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-posture\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-posture\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8001\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-posture-ubi:112\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-posture\",\"ports\":[{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/resources/config\",\"name\":\"ca-posture-score-config\",\"readOnly\":false},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"},{\"configMap\":{\"items\":[{\"key\":\"resourcesdict.json\",\"path\":\"resourcesdict.json\"},{\"key\":\"frameworkdict.json\",\"path\":\"frameworkdict.json\"}],\"name\":\"ca-posture-score-config\"},\"name\":\"ca-posture-score-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:58Z", - "generation": 1, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-posture\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/resources/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-posture-score-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:58Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:45Z" - } - ], - "name": "ca-posture", - "namespace": "cyberarmor-system", - "resourceVersion": "60787259", - "uid": "f41f4dc1-cfb0-4201-bca7-f1cf0b72b6b7" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-posture" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8001" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-posture-ubi:112", - "imagePullPolicy": "Always", - "name": "ca-posture", - "ports": [ - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "500m", - "memory": "100Mi" - }, - "requests": { - "cpu": "100m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/resources/config", - "name": "ca-posture-score-config" - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "resourcesdict.json", - "path": "resourcesdict.json" - }, - { - "key": "frameworkdict.json", - "path": "frameworkdict.json" - } - ], - "name": "ca-posture-score-config" - }, - "name": "ca-posture-score-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:45Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:58Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "ReplicaSet \"ca-posture-5996968d7b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-rbac\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-rbac\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"S3_BUCKET\",\"value\":\"ca-kubernetes-rbac-db-dev\"},{\"name\":\"AWS_REGION\",\"value\":\"eu-west-1\"},{\"name\":\"AWS_ACCESS_KEY_ID\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keyid\",\"name\":\"ca-rbac\"}}},{\"name\":\"AWS_SECRET_ACCESS_KEY\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keysecret\",\"name\":\"ca-rbac\"}}}],\"image\":\"quay.io/armosec/k8s-ca-rbac-scanner-ubi:20\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-rbac\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"400Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:50Z", - "generation": 1, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-rbac\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AWS_ACCESS_KEY_ID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"AWS_REGION\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"AWS_SECRET_ACCESS_KEY\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"S3_BUCKET\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:13Z" - } - ], - "name": "ca-rbac", - "namespace": "cyberarmor-system", - "resourceVersion": "60787051", - "uid": "d5898a09-2489-4254-b210-0725ddb2427a" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-rbac" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "S3_BUCKET", - "value": "ca-kubernetes-rbac-db-dev" - }, - { - "name": "AWS_REGION", - "value": "eu-west-1" - }, - { - "name": "AWS_ACCESS_KEY_ID", - "valueFrom": { - "secretKeyRef": { - "key": "keyid", - "name": "ca-rbac" - } - } - }, - { - "name": "AWS_SECRET_ACCESS_KEY", - "valueFrom": { - "secretKeyRef": { - "key": "keysecret", - "name": "ca-rbac" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-rbac-scanner-ubi:20", - "imagePullPolicy": "Always", - "name": "ca-rbac", - "resources": { - "limits": { - "cpu": "200m", - "memory": "400Mi" - }, - "requests": { - "cpu": "10m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:13Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:50Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "ReplicaSet \"ca-rbac-75c8cfd6b4\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-vuln-scan\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-vuln-scan\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"EVENT_RECEIVER_URL\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\",\"value\":\"4\"}],\"image\":\"quay.io/armosec/k8s-ca-vuln-scan-ubi:84\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-vuln-scan\",\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1.5Gi\"},\"requests\":{\"cpu\":\"500m\",\"memory\":\"1Gi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:47Z", - "generation": 1, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-vuln-scan\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EVENT_RECEIVER_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:00Z" - } - ], - "name": "ca-vuln-scan", - "namespace": "cyberarmor-system", - "resourceVersion": "60786938", - "uid": "9ea3d6cb-c6c0-423f-aab2-630827939285" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-vuln-scan" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "EVENT_RECEIVER_URL", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_MAX_VULN_SCAN_ROUTINS", - "value": "4" - } - ], - "image": "quay.io/armosec/k8s-ca-vuln-scan-ubi:84", - "imagePullPolicy": "Always", - "name": "ca-vuln-scan", - "resources": { - "limits": { - "cpu": "1", - "memory": "1536Mi" - }, - "requests": { - "cpu": "500m", - "memory": "1Gi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:00Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:47Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "ReplicaSet \"ca-vuln-scan-75b499df8c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-webhook\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-webhook\"}},\"template\":{\"metadata\":{\"annotations\":{\"certificate\":\"d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt\"},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-tlsCertFile=/etc/webhook/certs/tls.crt\",\"-tlsKeyFile=/etc/webhook/certs/tls.key\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_WEBHOOK_NAME\",\"value\":\"ca-webhook\"},{\"name\":\"CA_WEBHOOK_PORT\",\"value\":\"443\"},{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_LOGIN_SECRET_NAME\",\"value\":\"ca-login\"},{\"name\":\"CA_ORACLE_SERVER\",\"value\":\"http://ca-oracle:4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"http://ca-notification-server:8001\"},{\"name\":\"CA_OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-webhook-ubi:606\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-webhook\",\"ports\":[{\"containerPort\":443,\"name\":\"mutating-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"600Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"100Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/cazips\",\"name\":\"zip-download\"},{\"mountPath\":\"/etc/webhook/certs\",\"name\":\"ca-cluster-certificate\",\"readOnly\":true},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"emptyDir\":{},\"name\":\"zip-download\"},{\"name\":\"ca-cluster-certificate\",\"secret\":{\"secretName\":\"ca-cluster-certificate\"}},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:46Z", - "generation": 1, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:certificate": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-webhook\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_LOGIN_SECRET_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/cazips\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/webhook/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-cluster-certificate\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"zip-download\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:16Z" - } - ], - "name": "ca-webhook", - "namespace": "cyberarmor-system", - "resourceVersion": "60787072", - "uid": "c968fe90-8480-471f-bdf1-fa98447ce1d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-webhook" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "certificate": "d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt" - }, - "creationTimestamp": null, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-tlsCertFile=/etc/webhook/certs/tls.crt", - "-tlsKeyFile=/etc/webhook/certs/tls.key", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_WEBHOOK_NAME", - "value": "ca-webhook" - }, - { - "name": "CA_WEBHOOK_PORT", - "value": "443" - }, - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_LOGIN_SECRET_NAME", - "value": "ca-login" - }, - { - "name": "CA_ORACLE_SERVER", - "value": "http://ca-oracle:4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "http://ca-notification-server:8001" - }, - { - "name": "CA_OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-webhook-ubi:606", - "imagePullPolicy": "Always", - "name": "ca-webhook", - "ports": [ - { - "containerPort": 443, - "name": "mutating-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "600Mi" - }, - "requests": { - "cpu": "300m", - "memory": "100Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/cazips", - "name": "zip-download" - }, - { - "mountPath": "/etc/webhook/certs", - "name": "ca-cluster-certificate", - "readOnly": true - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "emptyDir": {}, - "name": "zip-download" - }, - { - "name": "ca-cluster-certificate", - "secret": { - "defaultMode": 420, - "secretName": "ca-cluster-certificate" - } - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:16Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:46Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "ReplicaSet \"ca-webhook-7dd8bbd798\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-websocket\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-websocket\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_VULN_SCAN_SCHEDULE\",\"value\":\"@every 11h\"},{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\",\"value\":\"@every 12h\"},{\"name\":\"CA_DEBUG_SIGNER\",\"value\":null}],\"image\":\"quay.io/armosec/k8s-ca-websocket-ubi:406\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-websocket\",\"ports\":[{\"containerPort\":4002,\"name\":\"trigger-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:43Z", - "generation": 1, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-websocket\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_DEBUG_SIGNER\"}": { - ".": {}, - "f:name": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_VULN_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:14Z" - } - ], - "name": "ca-websocket", - "namespace": "cyberarmor-system", - "resourceVersion": "60787065", - "uid": "914f30e9-d858-4945-9314-cbd3422ebaab" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-websocket" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_VULN_SCAN_SCHEDULE", - "value": "@every 11h" - }, - { - "name": "CA_POSTURE_SCAN_SCHEDULE", - "value": "@every 12h" - }, - { - "name": "CA_DEBUG_SIGNER" - } - ], - "image": "quay.io/armosec/k8s-ca-websocket-ubi:406", - "imagePullPolicy": "Always", - "name": "ca-websocket", - "ports": [ - { - "containerPort": 4002, - "name": "trigger-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "1000Mi" - }, - "requests": { - "cpu": "300m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:14Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:43Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "ReplicaSet \"ca-websocket-857758846f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"adservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"adservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"adservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/adservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"name\":\"server\",\"ports\":[{\"containerPort\":9555}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"180Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:51Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":9555,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:12Z" - } - ], - "name": "adservice", - "namespace": "hipster", - "resourceVersion": "61263240", - "uid": "368bea36-82be-4c28-8607-cf931a836185" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "adservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6415784d-d96b-4866-9c10-d571c8d8fd35", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:29", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-adservice" - }, - "creationTimestamp": null, - "labels": { - "app": "adservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/adservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 9555, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "300Mi" - }, - "requests": { - "cpu": "200m", - "memory": "180Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:24Z", - "lastUpdateTime": "2021-10-12T00:12:24Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:51Z", - "lastUpdateTime": "2021-10-13T00:28:12Z", - "message": "ReplicaSet \"adservice-7864446d5c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"cartservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"cartservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"cartservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"REDIS_ADDR\",\"value\":\"redis-cart:6379\"}],\"image\":\"gcr.io/google-samples/microservices-demo/cartservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15,\"periodSeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":7070}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:47Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"REDIS_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7070,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T09:40:08Z" - } - ], - "name": "cartservice", - "namespace": "hipster", - "resourceVersion": "61443544", - "uid": "df767287-ffc1-4559-b7fd-32b09bf6208c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "cartservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "7ced7c5c-c483-40b3-b6bc-8829339dc3e1", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:04", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-cartservice" - }, - "creationTimestamp": null, - "labels": { - "app": "cartservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "REDIS_ADDR", - "value": "redis-cart:6379" - } - ], - "image": "gcr.io/google-samples/microservices-demo/cartservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7070, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "128Mi" - }, - "requests": { - "cpu": "200m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-13T00:27:35Z", - "message": "ReplicaSet \"cartservice-7c8f8f9ddd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T09:40:08Z", - "lastUpdateTime": "2021-10-13T09:40:08Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"checkoutservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"checkoutservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"checkoutservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"5050\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"PAYMENT_SERVICE_ADDR\",\"value\":\"paymentservice:50051\"},{\"name\":\"EMAIL_SERVICE_ADDR\",\"value\":\"emailservice:5000\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"}],\"image\":\"gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":5050}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:42Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EMAIL_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PAYMENT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":5050,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:42Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:41Z" - } - ], - "name": "checkoutservice", - "namespace": "hipster", - "resourceVersion": "61262985", - "uid": "b5e6a8d8-1ec6-4acc-bf14-e3bb28bff284" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "checkoutservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "bebad8bb-8728-4813-ae19-d22a38a289a5", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:28", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-checkoutservice" - }, - "creationTimestamp": null, - "labels": { - "app": "checkoutservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "5050" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "PAYMENT_SERVICE_ADDR", - "value": "paymentservice:50051" - }, - { - "name": "EMAIL_SERVICE_ADDR", - "value": "emailservice:5000" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - } - ], - "image": "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 5050, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T14:05:32Z", - "lastUpdateTime": "2021-10-12T14:05:32Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:42Z", - "lastUpdateTime": "2021-10-13T00:27:42Z", - "message": "ReplicaSet \"checkoutservice-86c564466c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"currencyservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"currencyservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"currencyservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"7000\"}],\"image\":\"gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":7000,\"name\":\"grpc\"}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T08:37:54Z" - } - ], - "name": "currencyservice", - "namespace": "hipster", - "resourceVersion": "61423238", - "uid": "167b75e1-1be2-4764-aaad-dbb1ae248d3c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "currencyservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "4aa34494-0348-4859-9e29-56df9baf52ba", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-currencyservice" - }, - "creationTimestamp": null, - "labels": { - "app": "currencyservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "7000" - } - ], - "image": "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7000, - "name": "grpc", - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:29:19Z", - "message": "ReplicaSet \"currencyservice-544b6d849c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T08:37:54Z", - "lastUpdateTime": "2021-10-13T08:37:54Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"emailservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"emailservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"emailservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"DISABLE_PROFILER\",\"value\":\"1\"}],\"image\":\"gcr.io/google-samples/microservices-demo/emailservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:41Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"DISABLE_PROFILER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:41Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:07Z" - } - ], - "name": "emailservice", - "namespace": "hipster", - "resourceVersion": "61263204", - "uid": "9959433f-c964-4e6d-a2d7-3d1b9b617948" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "emailservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "e8aa9826-2367-44e1-9aad-a6d617b0fa06", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:48", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-emailservice" - }, - "creationTimestamp": null, - "labels": { - "app": "emailservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "DISABLE_PROFILER", - "value": "1" - } - ], - "image": "gcr.io/google-samples/microservices-demo/emailservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-12T00:11:47Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:41Z", - "lastUpdateTime": "2021-10-13T00:28:08Z", - "message": "ReplicaSet \"emailservice-cc7c4cd87\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"frontend\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"frontend\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"frontend\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"},{\"name\":\"RECOMMENDATION_SERVICE_ADDR\",\"value\":\"recommendationservice:8080\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"CHECKOUT_SERVICE_ADDR\",\"value\":\"checkoutservice:5050\"},{\"name\":\"AD_SERVICE_ADDR\",\"value\":\"adservice:9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/frontend:v0.2.3\",\"livenessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-liveness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-readiness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:44Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AD_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CHECKOUT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"RECOMMENDATION_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:44Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:34Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:22Z" - } - ], - "name": "frontend", - "namespace": "hipster", - "resourceVersion": "61263336", - "uid": "86b92d9e-22ad-4f0a-be26-41343f05f0d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "frontend" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9611f05f-4a8b-48ff-9722-e6a2ec702d65", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:57", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-frontend", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "frontend", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - }, - { - "name": "RECOMMENDATION_SERVICE_ADDR", - "value": "recommendationservice:8080" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "CHECKOUT_SERVICE_ADDR", - "value": "checkoutservice:5050" - }, - { - "name": "AD_SERVICE_ADDR", - "value": "adservice:9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/frontend:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-liveness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-readiness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:04Z", - "lastUpdateTime": "2021-10-12T00:12:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:44Z", - "lastUpdateTime": "2021-10-13T00:28:23Z", - "message": "ReplicaSet \"frontend-c747f6f47\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"loadgenerator\",\"namespace\":\"hipster\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"loadgenerator\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"loadgenerator\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"FRONTEND_ADDR\",\"value\":\"frontend:80\"},{\"name\":\"USERS\",\"value\":\"10\"}],\"image\":\"gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3\",\"name\":\"main\",\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"256Mi\"}}}],\"restartPolicy\":\"Always\",\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"main\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"FRONTEND_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"USERS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:38Z" - } - ], - "name": "loadgenerator", - "namespace": "hipster", - "resourceVersion": "61263451", - "uid": "e9200650-d25d-43f2-b1bc-4615beaed50c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "loadgenerator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "baca3d0f-fdc8-42c6-a9b1-ee29b3d173e0", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:26", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-loadgenerator", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "loadgenerator", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "FRONTEND_ADDR", - "value": "frontend:80" - }, - { - "name": "USERS", - "value": "10" - } - ], - "image": "gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "name": "main", - "resources": { - "limits": { - "cpu": "500m", - "memory": "512Mi" - }, - "requests": { - "cpu": "300m", - "memory": "256Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-13T00:24:15Z", - "lastUpdateTime": "2021-10-13T00:24:15Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:28:38Z", - "message": "ReplicaSet \"loadgenerator-6dcb6ffc4f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"paymentservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"paymentservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"paymentservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:45Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:45Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:29:27Z" - } - ], - "name": "paymentservice", - "namespace": "hipster", - "resourceVersion": "61263785", - "uid": "ab21c30f-d153-4ea8-982e-e12a71745dae" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "paymentservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "60b5720d-99b5-47a0-8bc4-656b372a6d17", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:52", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-paymentservice" - }, - "creationTimestamp": null, - "labels": { - "app": "paymentservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:45Z", - "lastUpdateTime": "2021-10-13T00:29:27Z", - "message": "ReplicaSet \"paymentservice-849b876ffd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"productcatalogservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"productcatalogservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"productcatalogservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":3550}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:46Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":3550,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:57Z" - } - ], - "name": "productcatalogservice", - "namespace": "hipster", - "resourceVersion": "61263117", - "uid": "50b29b6e-0f97-43b8-9555-a53d9c0e18f9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "productcatalogservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9bb4cc06-3907-401b-919f-c2974a623068", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-productcatalogservice" - }, - "creationTimestamp": null, - "labels": { - "app": "productcatalogservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 3550, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:46Z", - "lastUpdateTime": "2021-10-13T00:27:57Z", - "message": "ReplicaSet \"productcatalogservice-586fd876d5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"recommendationservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"recommendationservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"recommendationservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"450Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"220Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:43Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:37Z" - } - ], - "name": "recommendationservice", - "namespace": "hipster", - "resourceVersion": "61263443", - "uid": "00437f28-24c4-4759-ab93-f0be948eabc9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "recommendationservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "8cace306-b3ce-4f2f-8a6f-b122873b4eee", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-recommendationservice" - }, - "creationTimestamp": null, - "labels": { - "app": "recommendationservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "450Mi" - }, - "requests": { - "cpu": "100m", - "memory": "220Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-12T00:11:50Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:43Z", - "lastUpdateTime": "2021-10-13T00:28:37Z", - "message": "ReplicaSet \"recommendationservice-54b7b7b95d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"redis-cart\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"redis-cart\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"redis-cart\"}},\"spec\":{\"containers\":[{\"image\":\"redis:alpine\",\"livenessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"name\":\"redis\",\"ports\":[{\"containerPort\":6379}],\"readinessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"resources\":{\"limits\":{\"cpu\":\"125m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"70m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/data\",\"name\":\"redis-data\"}]}],\"volumes\":[{\"emptyDir\":{},\"name\":\"redis-data\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:50Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"redis\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":6379,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/data\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"redis-data\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:38Z" - } - ], - "name": "redis-cart", - "namespace": "hipster", - "resourceVersion": "61262948", - "uid": "76b3aebb-9ec5-479e-81ae-975ccf1bc6ec" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "redis-cart" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "838a7c21-618b-4693-a13b-838a9231ca58", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-redis-cart" - }, - "creationTimestamp": null, - "labels": { - "app": "redis-cart", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "image": "redis:alpine", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "name": "redis", - "ports": [ - { - "containerPort": 6379, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "125m", - "memory": "256Mi" - }, - "requests": { - "cpu": "70m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/data", - "name": "redis-data" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "emptyDir": {}, - "name": "redis-data" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:57Z", - "lastUpdateTime": "2021-10-12T00:11:57Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-13T00:27:38Z", - "message": "ReplicaSet \"redis-cart-594778c8b9\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"shippingservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"shippingservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"shippingservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:49Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:49Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:11Z" - } - ], - "name": "shippingservice", - "namespace": "hipster", - "resourceVersion": "61262726", - "uid": "febd2fe5-0e28-448e-aabd-31904ebb82a9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "shippingservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6503b850-839c-4b73-95ab-195d27b3c10d", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:26:58", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-shippingservice" - }, - "creationTimestamp": null, - "labels": { - "app": "shippingservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:00Z", - "lastUpdateTime": "2021-10-12T00:12:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:49Z", - "lastUpdateTime": "2021-10-13T00:27:11Z", - "message": "ReplicaSet \"shippingservice-758c9b4d4b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":\"10%\",\"maxUnavailable\":0}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"kubedns\",\"prometheus.io/port\":\"10054\",\"prometheus.io/scrape\":\"true\",\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"labels\":{\"k8s-app\":\"kube-dns\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchExpressions\":[{\"key\":\"k8s-app\",\"operator\":\"In\",\"values\":[\"kube-dns\"]}]},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"--domain=cluster.local.\",\"--dns-port=10053\",\"--config-dir=/kube-dns-config\",\"--v=2\"],\"env\":[{\"name\":\"PROMETHEUS_PORT\",\"value\":\"10055\"}],\"image\":\"gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/kubedns\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"kubedns\",\"ports\":[{\"containerPort\":10053,\"name\":\"dns-local\",\"protocol\":\"UDP\"},{\"containerPort\":10053,\"name\":\"dns-tcp-local\",\"protocol\":\"TCP\"},{\"containerPort\":10055,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readiness\",\"port\":8081,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":3,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"memory\":\"210Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"70Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001},\"volumeMounts\":[{\"mountPath\":\"/kube-dns-config\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"-v=2\",\"-logtostderr\",\"-configDir=/etc/k8s/dns/dnsmasq-nanny\",\"-restartDnsmasq=true\",\"--\",\"-k\",\"--cache-size=1000\",\"--no-negcache\",\"--dns-forward-max=1500\",\"--log-facility=-\",\"--server=/cluster.local/127.0.0.1#10053\",\"--server=/in-addr.arpa/127.0.0.1#10053\",\"--server=/ip6.arpa/127.0.0.1#10053\"],\"image\":\"gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/dnsmasq\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"dnsmasq\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"150m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"capabilities\":{\"add\":[\"NET_BIND_SERVICE\",\"SETGID\"],\"drop\":[\"all\"]}},\"volumeMounts\":[{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"--v=2\",\"--logtostderr\",\"--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV\",\"--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV\"],\"image\":\"gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/metrics\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"sidecar\",\"ports\":[{\"containerPort\":10054,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001}}],\"dnsPolicy\":\"Default\",\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 4, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:scheduler.alpha.kubernetes.io/critical-pod": {}, - "f:seccomp.security.alpha.kubernetes.io/pod": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:podAntiAffinity": { - ".": {}, - "f:preferredDuringSchedulingIgnoredDuringExecution": {} - } - }, - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:capabilities": { - ".": {}, - "f:add": {}, - "f:drop": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"kubedns\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PROMETHEUS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10053,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10053,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10055,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/kube-dns-config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"sidecar\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10054,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - "f:image": {} - }, - "k:{\"name\":\"kubedns\"}": { - "f:image": {} - }, - "k:{\"name\":\"sidecar\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:06:26Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "53109905", - "uid": "cd5cca24-7cd2-4548-a5d3-d90beb79f9e8" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 2, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "10%", - "maxUnavailable": 0 - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "kubedns", - "prometheus.io/port": "10054", - "prometheus.io/scrape": "true", - "scheduler.alpha.kubernetes.io/critical-pod": "", - "seccomp.security.alpha.kubernetes.io/pod": "runtime/default" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns" - } - }, - "spec": { - "affinity": { - "podAntiAffinity": { - "preferredDuringSchedulingIgnoredDuringExecution": [ - { - "podAffinityTerm": { - "labelSelector": { - "matchExpressions": [ - { - "key": "k8s-app", - "operator": "In", - "values": [ - "kube-dns" - ] - } - ] - }, - "topologyKey": "kubernetes.io/hostname" - }, - "weight": 100 - } - ] - } - }, - "containers": [ - { - "args": [ - "--domain=cluster.local.", - "--dns-port=10053", - "--config-dir=/kube-dns-config", - "--v=2" - ], - "env": [ - { - "name": "PROMETHEUS_PORT", - "value": "10055" - } - ], - "image": "gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/kubedns", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "kubedns", - "ports": [ - { - "containerPort": 10053, - "name": "dns-local", - "protocol": "UDP" - }, - { - "containerPort": 10053, - "name": "dns-tcp-local", - "protocol": "TCP" - }, - { - "containerPort": 10055, - "name": "metrics", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/readiness", - "port": 8081, - "scheme": "HTTP" - }, - "initialDelaySeconds": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "resources": { - "limits": { - "memory": "210Mi" - }, - "requests": { - "cpu": "100m", - "memory": "70Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/kube-dns-config", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "-v=2", - "-logtostderr", - "-configDir=/etc/k8s/dns/dnsmasq-nanny", - "-restartDnsmasq=true", - "--", - "-k", - "--cache-size=1000", - "--no-negcache", - "--dns-forward-max=1500", - "--log-facility=-", - "--server=/cluster.local/127.0.0.1#10053", - "--server=/in-addr.arpa/127.0.0.1#10053", - "--server=/ip6.arpa/127.0.0.1#10053" - ], - "image": "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/dnsmasq", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "dnsmasq", - "ports": [ - { - "containerPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "150m", - "memory": "20Mi" - } - }, - "securityContext": { - "capabilities": { - "add": [ - "NET_BIND_SERVICE", - "SETGID" - ], - "drop": [ - "all" - ] - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/k8s/dns/dnsmasq-nanny", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "--v=2", - "--logtostderr", - "--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV", - "--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV" - ], - "image": "gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/metrics", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "sidecar", - "ports": [ - { - "containerPort": 10054, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns", - "serviceAccountName": "kube-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 2, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-09-11T01:57:38Z", - "message": "ReplicaSet \"kube-dns-59844ff879\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:06:26Z", - "lastUpdateTime": "2021-09-25T17:06:26Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 4, - "readyReplicas": 2, - "replicas": 2, - "updatedReplicas": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns-autoscaler\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns-autoscaler\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"spec\":{\"containers\":[{\"command\":[\"/cluster-proportional-autoscaler\",\"--namespace=kube-system\",\"--configmap=kube-dns-autoscaler\",\"--target=Deployment/kube-dns\",\"--default-params={\\\"linear\\\":{\\\"coresPerReplica\\\":256,\\\"nodesPerReplica\\\":16,\\\"preventSinglePointFailure\\\":true,\\\"includeUnschedulableNodes\\\":true}}\",\"--logtostderr=true\",\"--v=2\"],\"image\":\"gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0\",\"name\":\"autoscaler\",\"resources\":{\"requests\":{\"cpu\":\"20m\",\"memory\":\"10Mi\"}}}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"seccompProfile\":{\"type\":\"RuntimeDefault\"},\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns-autoscaler\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns-autoscaler", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"autoscaler\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:02:52Z" - } - ], - "name": "kube-dns-autoscaler", - "namespace": "kube-system", - "resourceVersion": "53108562", - "uid": "c84ce079-f3c8-46ba-871f-0f2d42ffee1e" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/cluster-proportional-autoscaler", - "--namespace=kube-system", - "--configmap=kube-dns-autoscaler", - "--target=Deployment/kube-dns", - "--default-params={\"linear\":{\"coresPerReplica\":256,\"nodesPerReplica\":16,\"preventSinglePointFailure\":true,\"includeUnschedulableNodes\":true}}", - "--logtostderr=true", - "--v=2" - ], - "image": "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "autoscaler", - "resources": { - "requests": { - "cpu": "20m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "seccompProfile": { - "type": "RuntimeDefault" - }, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns-autoscaler", - "serviceAccountName": "kube-dns-autoscaler", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:54:39Z", - "message": "ReplicaSet \"kube-dns-autoscaler-844c9d9448\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:02:52Z", - "lastUpdateTime": "2021-09-25T17:02:52Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"glbc\",\"kubernetes.io/cluster-service\":\"true\",\"kubernetes.io/name\":\"GLBC\"},\"name\":\"l7-default-backend\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"glbc\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"glbc\",\"name\":\"glbc\"}},\"spec\":{\"containers\":[{\"image\":\"k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":30,\"timeoutSeconds\":5},\"name\":\"default-http-backend\",\"ports\":[{\"containerPort\":8080}],\"resources\":{\"limits\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}}}],\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"tolerations\":[{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "glbc", - "kubernetes.io/cluster-service": "true", - "kubernetes.io/name": "GLBC" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:kubernetes.io/name": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:name": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"default-http-backend\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:seccompProfile": { - "f:type": {} - } - }, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:01:20Z" - } - ], - "name": "l7-default-backend", - "namespace": "kube-system", - "resourceVersion": "53107969", - "uid": "32a76c03-37a1-44e9-b293-dd6b46ed274b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "glbc" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "glbc", - "name": "glbc" - } - }, - "spec": { - "containers": [ - { - "image": "k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 30, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "default-http-backend", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "10m", - "memory": "20Mi" - }, - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:56:25Z", - "message": "ReplicaSet \"l7-default-backend-56cb9644f6\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:01:20Z", - "lastUpdateTime": "2021-09-25T17:01:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "24", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metrics-server\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server-v0.3.6\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server\"},\"spec\":{\"containers\":[{\"command\":[\"/metrics-server\",\"--metric-resolution=30s\",\"--kubelet-port=10255\",\"--deprecated-kubelet-completely-insecure=true\",\"--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP\"],\"image\":\"k8s.gcr.io/metrics-server-amd64:v0.3.6\",\"name\":\"metrics-server\",\"ports\":[{\"containerPort\":443,\"name\":\"https\",\"protocol\":\"TCP\"}]},{\"command\":[\"/pod_nanny\",\"--config-dir=/etc/config\",\"--cpu=40m\",\"--extra-cpu=0.5m\",\"--memory=35Mi\",\"--extra-memory=4Mi\",\"--threshold=5\",\"--deployment=metrics-server-v0.3.6\",\"--container=metrics-server\",\"--poll-period=300000\",\"--estimator=exponential\",\"--scale-down-delay=24h\",\"--minClusterSize=5\",\"--use-metrics=true\"],\"env\":[{\"name\":\"MY_POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"MY_POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"gke.gcr.io/addon-resizer:1.8.11-gke.0\",\"name\":\"metrics-server-nanny\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"5m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"metrics-server-config-volume\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"metrics-server\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"metrics-server-config\"},\"name\":\"metrics-server-config-volume\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 24, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metrics-server", - "kubernetes.io/cluster-service": "true", - "version": "v0.3.6" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:version": {} - }, - "f:name": {} - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - }, - "k:{\"name\":\"metrics-server-nanny\"}": { - ".": {}, - "f:command": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"MY_POD_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"MY_POD_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"metrics-server-config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - "f:resources": { - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - } - } - } - } - } - } - }, - "manager": "pod_nanny", - "operation": "Update", - "time": "2021-06-13T13:42:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-26T17:13:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-26T17:13:52Z" - } - ], - "name": "metrics-server-v0.3.6", - "namespace": "kube-system", - "resourceVersion": "53582788", - "uid": "872d0f34-7998-45d3-9eea-570e0a47e03c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - }, - "name": "metrics-server" - }, - "spec": { - "containers": [ - { - "command": [ - "/metrics-server", - "--metric-resolution=30s", - "--kubelet-port=10255", - "--deprecated-kubelet-completely-insecure=true", - "--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP" - ], - "image": "k8s.gcr.io/metrics-server-amd64:v0.3.6", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server", - "ports": [ - { - "containerPort": 443, - "name": "https", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "44m", - "memory": "63Mi" - }, - "requests": { - "cpu": "44m", - "memory": "63Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - }, - { - "command": [ - "/pod_nanny", - "--config-dir=/etc/config", - "--cpu=40m", - "--extra-cpu=0.5m", - "--memory=35Mi", - "--extra-memory=4Mi", - "--threshold=5", - "--deployment=metrics-server-v0.3.6", - "--container=metrics-server", - "--poll-period=300000", - "--estimator=exponential", - "--scale-down-delay=24h", - "--minClusterSize=5", - "--use-metrics=true" - ], - "env": [ - { - "name": "MY_POD_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.name" - } - } - }, - { - "name": "MY_POD_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - } - ], - "image": "gke.gcr.io/addon-resizer:1.8.11-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server-nanny", - "resources": { - "limits": { - "cpu": "100m", - "memory": "300Mi" - }, - "requests": { - "cpu": "5m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "metrics-server-config-volume" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "serviceAccount": "metrics-server", - "serviceAccountName": "metrics-server", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "metrics-server-config" - }, - "name": "metrics-server-config-volume" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-09-25T17:12:33Z", - "lastUpdateTime": "2021-09-25T17:12:33Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-06-13T13:42:20Z", - "lastUpdateTime": "2021-09-26T17:13:52Z", - "message": "ReplicaSet \"metrics-server-v0.3.6-7889654bbb\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 24, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "6", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-proxy\"},\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-proxy\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-proxy\"}},\"spec\":{\"containers\":[{\"command\":[\"/bin/sh\",\"-c\",\"kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\\u003e\\u003e/var/log/kube-proxy.log 2\\u003e\\u00261\"],\"env\":[{\"name\":\"KUBERNETES_SERVICE_HOST\",\"value\":\"34.78.97.243\"}],\"image\":\"gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001\",\"name\":\"kube-proxy\",\"resources\":{\"requests\":{\"cpu\":\"100m\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/log\",\"name\":\"varlog\",\"readOnly\":false},{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/lib/modules\",\"name\":\"lib-modules\",\"readOnly\":true}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\",\"node.kubernetes.io/kube-proxy-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"kube-proxy\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/log\"},\"name\":\"varlog\"},{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"hostPath\":{\"path\":\"/lib/modules\"},\"name\":\"lib-modules\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "generation": 6, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-proxy" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBERNETES_SERVICE_HOST\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/kube-proxy-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - "f:command": {}, - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:44Z" - } - ], - "name": "kube-proxy", - "namespace": "kube-system", - "resourceVersion": "52161714", - "uid": "bb6f9ab0-e586-407b-95c0-773637c696e8" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-proxy" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-proxy" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "env": [ - { - "name": "KUBERNETES_SERVICE_HOST", - "value": "34.78.97.243" - } - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux", - "node.kubernetes.io/kube-proxy-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "kube-proxy", - "serviceAccountName": "kube-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 6 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"},\"name\":\"metadata-proxy-v0.1\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metadata-proxy\",\"version\":\"v0.1\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"}},\"spec\":{\"containers\":[{\"args\":[\"--addr=0.0.0.0:988\"],\"image\":\"k8s.gcr.io/metadata-proxy:v0.1.12\",\"name\":\"metadata-proxy\",\"resources\":{\"limits\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"},\"requests\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"}},\"securityContext\":{\"privileged\":true}}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"cloud.google.com/metadata-proxy-ready\":\"true\",\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"metadata-proxy\",\"terminationGracePeriodSeconds\":30,\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 3, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:cloud.google.com/metadata-proxy-ready": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - "f:args": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - } - ], - "name": "metadata-proxy-v0.1", - "namespace": "kube-system", - "resourceVersion": "25934435", - "uid": "94bf5845-f77b-47d4-bcec-e78549b4d8a3" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metadata-proxy", - "version": "v0.1" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--addr=0.0.0.0:988" - ], - "image": "k8s.gcr.io/metadata-proxy:v0.1.12", - "imagePullPolicy": "IfNotPresent", - "name": "metadata-proxy", - "resources": { - "limits": { - "cpu": "30m", - "memory": "25Mi" - }, - "requests": { - "cpu": "30m", - "memory": "25Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "cloud.google.com/metadata-proxy-ready": "true", - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "metadata-proxy", - "serviceAccountName": "metadata-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 3 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"node-local-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"node-local-dns\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"nodelocaldns\",\"components.gke.io/component-version\":\"1.4.0\",\"prometheus.io/port\":\"9253\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"k8s-app\":\"node-local-dns\"}},\"spec\":{\"containers\":[{\"args\":[\"-localip\",\"169.254.20.10,10.72.0.10\",\"-conf\",\"/etc/Corefile\",\"-upstreamsvc\",\"kube-dns-upstream\",\"-kubednscm\",\"/etc/kube-dns\"],\"image\":\"gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1\",\"livenessProbe\":{\"httpGet\":{\"host\":\"169.254.20.10\",\"path\":\"/health\",\"port\":8080},\"initialDelaySeconds\":60,\"timeoutSeconds\":5},\"name\":\"node-cache\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"},{\"containerPort\":9253,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"25m\",\"memory\":\"5Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/etc/coredns\",\"name\":\"config-volume\"},{\"mountPath\":\"/etc/kube-dns\",\"name\":\"kube-dns-config\"}]}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"addon.gke.io/node-local-dns-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"node-local-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"},{\"configMap\":{\"items\":[{\"key\":\"Corefile\",\"path\":\"Corefile.base\"}],\"name\":\"node-local-dns\"},\"name\":\"config-volume\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"}}}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "node-local-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:host": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":9253,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/coredns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/kube-dns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:addon.gke.io/node-local-dns-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "53114241", - "uid": "5069e9ba-0784-41bf-9577-3757bcb3b6d6" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "node-local-dns" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "nodelocaldns", - "components.gke.io/component-version": "1.4.0", - "prometheus.io/port": "9253", - "prometheus.io/scrape": "true" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "node-local-dns" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-localip", - "169.254.20.10,10.72.0.10", - "-conf", - "/etc/Corefile", - "-upstreamsvc", - "kube-dns-upstream", - "-kubednscm", - "/etc/kube-dns" - ], - "image": "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "host": "169.254.20.10", - "path": "/health", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "node-cache", - "ports": [ - { - "containerPort": 53, - "hostPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "hostPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - }, - { - "containerPort": 9253, - "hostPort": 9253, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "25m", - "memory": "5Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/etc/coredns", - "name": "config-volume" - }, - { - "mountPath": "/etc/kube-dns", - "name": "kube-dns-config" - } - ] - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "addon.gke.io/node-local-dns-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "node-local-dns", - "serviceAccountName": "node-local-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "Corefile", - "path": "Corefile.base" - } - ], - "name": "node-local-dns" - }, - "name": "config-volume" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 2, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"nvidia-gpu-device-plugin\"},\"name\":\"nvidia-gpu-device-plugin\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"cloud.google.com/gke-accelerator\",\"operator\":\"Exists\"}]}]}}},\"containers\":[{\"command\":[\"/usr/bin/nvidia-gpu-device-plugin\",\"-logtostderr\",\"--enable-container-gpu-metrics\",\"--enable-health-monitoring\"],\"env\":[{\"name\":\"LD_LIBRARY_PATH\",\"value\":\"/usr/local/nvidia/lib64\"}],\"image\":\"gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317\",\"name\":\"nvidia-gpu-device-plugin\",\"ports\":[{\"containerPort\":2112,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/device-plugin\",\"name\":\"device-plugin\"},{\"mountPath\":\"/dev\",\"name\":\"dev\"},{\"mountPath\":\"/usr/local/nvidia\",\"name\":\"nvidia\"},{\"mountPath\":\"/var/lib/kubelet/pod-resources\",\"name\":\"pod-resources\"},{\"mountPath\":\"/proc\",\"name\":\"proc\"},{\"mountPath\":\"/etc/nvidia\",\"name\":\"nvidia-config\"}]}],\"priorityClassName\":\"system-node-critical\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/device-plugins\"},\"name\":\"device-plugin\"},{\"hostPath\":{\"path\":\"/dev\"},\"name\":\"dev\"},{\"hostPath\":{\"path\":\"/home/kubernetes/bin/nvidia\",\"type\":\"Directory\"},\"name\":\"nvidia\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/pod-resources\"},\"name\":\"pod-resources\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"proc\"},{\"hostPath\":{\"path\":\"/etc/nvidia\"},\"name\":\"nvidia-config\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:17Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "nvidia-gpu-device-plugin" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:nodeAffinity": { - ".": {}, - "f:requiredDuringSchedulingIgnoredDuringExecution": { - ".": {}, - "f:nodeSelectorTerms": {} - } - } - }, - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"LD_LIBRARY_PATH\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":2112,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/device-plugin\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/local/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet/pod-resources\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"dev\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"device-plugin\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"nvidia\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"pod-resources\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - "f:command": {}, - "f:image": {}, - "f:volumeMounts": { - "k:{\"mountPath\":\"/etc/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/proc\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:volumes": { - "k:{\"name\":\"nvidia-config\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"proc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "nvidia-gpu-device-plugin", - "namespace": "kube-system", - "resourceVersion": "25934477", - "uid": "14396a20-ecee-4671-aefe-2a5b9d2e0dde" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "spec": { - "affinity": { - "nodeAffinity": { - "requiredDuringSchedulingIgnoredDuringExecution": { - "nodeSelectorTerms": [ - { - "matchExpressions": [ - { - "key": "cloud.google.com/gke-accelerator", - "operator": "Exists" - } - ] - } - ] - } - } - }, - "containers": [ - { - "command": [ - "/usr/bin/nvidia-gpu-device-plugin", - "-logtostderr", - "--enable-container-gpu-metrics", - "--enable-health-monitoring" - ], - "env": [ - { - "name": "LD_LIBRARY_PATH", - "value": "/usr/local/nvidia/lib64" - } - ], - "image": "gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317", - "imagePullPolicy": "IfNotPresent", - "name": "nvidia-gpu-device-plugin", - "ports": [ - { - "containerPort": 2112, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "20Mi" - }, - "requests": { - "cpu": "50m", - "memory": "20Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/device-plugin", - "name": "device-plugin" - }, - { - "mountPath": "/dev", - "name": "dev" - }, - { - "mountPath": "/usr/local/nvidia", - "name": "nvidia" - }, - { - "mountPath": "/var/lib/kubelet/pod-resources", - "name": "pod-resources" - }, - { - "mountPath": "/proc", - "name": "proc" - }, - { - "mountPath": "/etc/nvidia", - "name": "nvidia-config" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/device-plugins", - "type": "" - }, - "name": "device-plugin" - }, - { - "hostPath": { - "path": "/dev", - "type": "" - }, - "name": "dev" - }, - { - "hostPath": { - "path": "/home/kubernetes/bin/nvidia", - "type": "Directory" - }, - "name": "nvidia" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/pod-resources", - "type": "" - }, - "name": "pod-resources" - }, - { - "hostPath": { - "path": "/proc", - "type": "" - }, - "name": "proc" - }, - { - "hostPath": { - "path": "/etc/nvidia", - "type": "" - }, - "name": "nvidia-config" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:02:45.009201226Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:02:48Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"6de798cc-d558-479a-8ef4-38363e434633\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.63\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:02:55Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-5naq", - "uid": "6de798cc-d558-479a-8ef4-38363e434633" - } - ], - "resourceVersion": "53108585", - "uid": "fdd66d80-d09d-4b43-a291-b3797c7a5864" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-5naq", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://50767376b8a42b7a390e84c5c451d1485b1a562873b915100dc605bbcc49c1c5", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:02:48Z" - } - } - } - ], - "hostIP": "10.132.0.63", - "phase": "Running", - "podIP": "10.132.0.63", - "podIPs": [ - { - "ip": "10.132.0.63" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:02:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:09:05.595580038Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:09:09Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"d288c56c-2a00-42fe-b2ea-b8761fec2a4e\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.193\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:09:16Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-abj3", - "uid": "d288c56c-2a00-42fe-b2ea-b8761fec2a4e" - } - ], - "resourceVersion": "53110982", - "uid": "0866b060-d7a6-40bc-9ed9-292fbce958e9" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-abj3", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b04121a3de085254493b48dbe1be551abd021877d1c098afbd19e6429df8f4ba", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:09:08Z" - } - } - } - ], - "hostIP": "10.132.15.193", - "phase": "Running", - "podIP": "10.132.15.193", - "podIPs": [ - { - "ip": "10.132.15.193" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:09:06Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:56:27.195784979Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:56:29Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"9aa58d78-0147-4564-9900-0409a6bec341\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.61\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:56:37Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-enr8", - "uid": "9aa58d78-0147-4564-9900-0409a6bec341" - } - ], - "resourceVersion": "53106105", - "uid": "b940e7b5-9e7f-4ac7-a3ee-6c6655c1e65a" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-enr8", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b9375aed4bc463ecfa5fcfb0cfb3b55d087416bfe0c3267c1395e8f93569d03c", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:56:29Z" - } - } - } - ], - "hostIP": "10.132.0.61", - "phase": "Running", - "podIP": "10.132.0.61", - "podIPs": [ - { - "ip": "10.132.0.61" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:56:28Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:59:41.285621877Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:59:44Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"c1ab3c15-9764-40f5-ba6b-82556dc98ea2\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.62\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:59:52Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-oq2w", - "uid": "c1ab3c15-9764-40f5-ba6b-82556dc98ea2" - } - ], - "resourceVersion": "53107378", - "uid": "19e52dea-6339-4ed7-8e32-3d39b242d133" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-oq2w", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://a0b27bef16953a38c48075124547583280bccf28d1d6cf54c3b3e754e2847c86", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:59:44Z" - } - } - } - ], - "hostIP": "10.132.0.62", - "phase": "Running", - "podIP": "10.132.0.62", - "podIPs": [ - { - "ip": "10.132.0.62" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:59:42Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:12:12.095932889Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:12:15Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"7042c0e8-8dc5-4d1d-8b36-92c692c31c76\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.194\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:12:22Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-rgdp", - "uid": "7042c0e8-8dc5-4d1d-8b36-92c692c31c76" - } - ], - "resourceVersion": "53112149", - "uid": "5248c280-7bde-4fe9-a74e-56ae25abb0d2" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-rgdp", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://fd91ae480585a78c59ef401dc852d58921e76693ecbd908d98e4b63da6c298ff", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:12:14Z" - } - } - } - ], - "hostIP": "10.132.15.194", - "phase": "Running", - "podIP": "10.132.15.194", - "podIPs": [ - { - "ip": "10.132.15.194" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:12:13Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:05:45.558688986Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:05:49Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"a58f61e7-9d9e-4266-90d4-16b9969cb373\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.192\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:05:56Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-x940", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-x940", - "uid": "a58f61e7-9d9e-4266-90d4-16b9969cb373" - } - ], - "resourceVersion": "53109692", - "uid": "71a05734-f741-4b7e-82fe-765c555b3607" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-x940", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://6abab671623159f7174321118f58600f8955267a139a72508e9a73631ef7920d", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:05:48Z" - } - } - } - ], - "hostIP": "10.132.15.192", - "phase": "Running", - "podIP": "10.132.15.192", - "podIPs": [ - { - "ip": "10.132.15.192" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:05:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:15:06.466708143Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:15:10Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"65f37105-dd71-428b-bf8b-0e82b88027f1\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.195\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:15:17Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-zzyg", - "uid": "65f37105-dd71-428b-bf8b-0e82b88027f1" - } - ], - "resourceVersion": "53113200", - "uid": "dac23622-ae54-4a1a-a6ca-3c020911966e" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-zzyg", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://ee309dad5cb7047fcbd7eb0401760ccb4bd986080ab11c860911e37b132a2a5c", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:15:09Z" - } - } - } - ], - "hostIP": "10.132.15.195", - "phase": "Running", - "podIP": "10.132.15.195", - "podIPs": [ - { - "ip": "10.132.15.195" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:15:07Z" - } - } - ], - "listInputKinds": null - } - ], - "remediation": "Remove all insecure capabilities which aren’t necessary for the container.", - "description": "Giving insecure or excsessive capabilities to a container can increase the impact of the container compromise. This control identifies all the PODs with dangerous capabilities (see documentation pages for details).", - "score": 97 - }, - { - "guid": "", - "attributes": { - "armoBuiltin": true - }, - "id": "C-0055", - "controlID": "C-0055", - "name": "Linux hardening", - "ruleReports": [ - { - "name": "linux-hardening", - "remediation": "", - "ruleStatus": { - "status": "success", - "message": "" - }, - "ruleResponses": [ - { - "alertMessage": "Pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:02:45.009201226Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:02:48Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"6de798cc-d558-479a-8ef4-38363e434633\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.63\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:02:55Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-5naq", - "uid": "6de798cc-d558-479a-8ef4-38363e434633" - } - ], - "resourceVersion": "53108585", - "uid": "fdd66d80-d09d-4b43-a291-b3797c7a5864" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-5naq", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://50767376b8a42b7a390e84c5c451d1485b1a562873b915100dc605bbcc49c1c5", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:02:48Z" - } - } - } - ], - "hostIP": "10.132.0.63", - "phase": "Running", - "podIP": "10.132.0.63", - "podIPs": [ - { - "ip": "10.132.0.63" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:02:46Z" - } - } - ] - } - }, - { - "alertMessage": "Pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3 does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:09:05.595580038Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:09:09Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"d288c56c-2a00-42fe-b2ea-b8761fec2a4e\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.193\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:09:16Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-abj3", - "uid": "d288c56c-2a00-42fe-b2ea-b8761fec2a4e" - } - ], - "resourceVersion": "53110982", - "uid": "0866b060-d7a6-40bc-9ed9-292fbce958e9" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-abj3", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b04121a3de085254493b48dbe1be551abd021877d1c098afbd19e6429df8f4ba", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:09:08Z" - } - } - } - ], - "hostIP": "10.132.15.193", - "phase": "Running", - "podIP": "10.132.15.193", - "podIPs": [ - { - "ip": "10.132.15.193" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:09:06Z" - } - } - ] - } - }, - { - "alertMessage": "Pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8 does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:56:27.195784979Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:56:29Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"9aa58d78-0147-4564-9900-0409a6bec341\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.61\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:56:37Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-enr8", - "uid": "9aa58d78-0147-4564-9900-0409a6bec341" - } - ], - "resourceVersion": "53106105", - "uid": "b940e7b5-9e7f-4ac7-a3ee-6c6655c1e65a" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-enr8", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b9375aed4bc463ecfa5fcfb0cfb3b55d087416bfe0c3267c1395e8f93569d03c", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:56:29Z" - } - } - } - ], - "hostIP": "10.132.0.61", - "phase": "Running", - "podIP": "10.132.0.61", - "podIPs": [ - { - "ip": "10.132.0.61" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:56:28Z" - } - } - ] - } - }, - { - "alertMessage": "Pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:59:41.285621877Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:59:44Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"c1ab3c15-9764-40f5-ba6b-82556dc98ea2\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.62\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:59:52Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-oq2w", - "uid": "c1ab3c15-9764-40f5-ba6b-82556dc98ea2" - } - ], - "resourceVersion": "53107378", - "uid": "19e52dea-6339-4ed7-8e32-3d39b242d133" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-oq2w", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://a0b27bef16953a38c48075124547583280bccf28d1d6cf54c3b3e754e2847c86", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:59:44Z" - } - } - } - ], - "hostIP": "10.132.0.62", - "phase": "Running", - "podIP": "10.132.0.62", - "podIPs": [ - { - "ip": "10.132.0.62" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:59:42Z" - } - } - ] - } - }, - { - "alertMessage": "Pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:12:12.095932889Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:12:15Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"7042c0e8-8dc5-4d1d-8b36-92c692c31c76\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.194\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:12:22Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-rgdp", - "uid": "7042c0e8-8dc5-4d1d-8b36-92c692c31c76" - } - ], - "resourceVersion": "53112149", - "uid": "5248c280-7bde-4fe9-a74e-56ae25abb0d2" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-rgdp", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://fd91ae480585a78c59ef401dc852d58921e76693ecbd908d98e4b63da6c298ff", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:12:14Z" - } - } - } - ], - "hostIP": "10.132.15.194", - "phase": "Running", - "podIP": "10.132.15.194", - "podIPs": [ - { - "ip": "10.132.15.194" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:12:13Z" - } - } - ] - } - }, - { - "alertMessage": "Pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-x940 does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:05:45.558688986Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:05:49Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"a58f61e7-9d9e-4266-90d4-16b9969cb373\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.192\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:05:56Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-x940", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-x940", - "uid": "a58f61e7-9d9e-4266-90d4-16b9969cb373" - } - ], - "resourceVersion": "53109692", - "uid": "71a05734-f741-4b7e-82fe-765c555b3607" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-x940", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://6abab671623159f7174321118f58600f8955267a139a72508e9a73631ef7920d", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:05:48Z" - } - } - } - ], - "hostIP": "10.132.15.192", - "phase": "Running", - "podIP": "10.132.15.192", - "podIPs": [ - { - "ip": "10.132.15.192" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:05:46Z" - } - } - ] - } - }, - { - "alertMessage": "Pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:15:06.466708143Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:15:10Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"65f37105-dd71-428b-bf8b-0e82b88027f1\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.195\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:15:17Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-zzyg", - "uid": "65f37105-dd71-428b-bf8b-0e82b88027f1" - } - ], - "resourceVersion": "53113200", - "uid": "dac23622-ae54-4a1a-a6ca-3c020911966e" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-zzyg", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://ee309dad5cb7047fcbd7eb0401760ccb4bd986080ab11c860911e37b132a2a5c", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:15:09Z" - } - } - } - ], - "hostIP": "10.132.15.195", - "phase": "Running", - "podIP": "10.132.15.195", - "podIPs": [ - { - "ip": "10.132.15.195" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:15:07Z" - } - } - ] - } - }, - { - "alertMessage": "Workload: ca-audit does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-audit\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-audit\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CONFIG_FILES\",\"value\":\"/config/config.json\"},{\"name\":\"CA_SERVER_TYPE\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"cluster_kind\",\"name\":\"ca-audit\"}}}],\"image\":\"quay.io/armosec/k8s-ca-auditlog-ubi:21\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-audit\",\"ports\":[{\"containerPort\":443,\"name\":\"ca-audit-port\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/config\",\"name\":\"ca-audit\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-audit\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"config\",\"path\":\"config.json\"}],\"name\":\"ca-audit\"},\"name\":\"ca-audit\"},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:54Z", - "generation": 1, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CONFIG_FILES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_SERVER_TYPE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:54Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-audit", - "namespace": "cyberarmor-system", - "resourceVersion": "60787209", - "uid": "687f52ea-6956-4e8a-bb8c-7ea35a04b3f0" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-audit" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CONFIG_FILES", - "value": "/config/config.json" - }, - { - "name": "CA_SERVER_TYPE", - "valueFrom": { - "configMapKeyRef": { - "key": "cluster_kind", - "name": "ca-audit" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-auditlog-ubi:21", - "imagePullPolicy": "Always", - "name": "ca-audit", - "ports": [ - { - "containerPort": 443, - "name": "ca-audit-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/config", - "name": "ca-audit", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-audit", - "serviceAccountName": "ca-audit", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "config", - "path": "config.json" - } - ], - "name": "ca-audit" - }, - "name": "ca-audit" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:54Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-audit-c667df747\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Workload: ca-dashboard-aggregator does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-dashboard-aggregator\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-dashboard-aggregator\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-configtype=1\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-dashboard-aggregator\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"40Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:55Z", - "generation": 1, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-dashboard-aggregator\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:55Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T23:55:20Z" - } - ], - "name": "ca-dashboard-aggregator", - "namespace": "cyberarmor-system", - "resourceVersion": "61250607", - "uid": "0ba23569-e254-4388-b22f-30cc1eca031b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-dashboard-aggregator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-configtype=1", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173", - "imagePullPolicy": "Always", - "name": "ca-dashboard-aggregator", - "resources": { - "limits": { - "cpu": "200m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "40Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:18:55Z", - "lastUpdateTime": "2021-10-12T00:19:19Z", - "message": "ReplicaSet \"ca-dashboard-aggregator-5b8bdbc8f5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-12T23:55:20Z", - "lastUpdateTime": "2021-10-12T23:55:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Workload: ca-notification-server does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-notification-server\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-notification-server\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"maserNotificationServer\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\",\"value\":\"customerGUID\"},{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\",\"value\":\"8001\"},{\"name\":\"CA_NOTIFICATION_SERVER_PORT\",\"value\":\"8002\"}],\"image\":\"quay.io/armosec/notification-server-ubi:89\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-notification-server\",\"ports\":[{\"containerPort\":8001,\"name\":\"websocket\"},{\"containerPort\":8002,\"name\":\"rest-api\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:59Z", - "generation": 1, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-notification-server\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8001,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:59Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:11Z" - } - ], - "name": "ca-notification-server", - "namespace": "cyberarmor-system", - "resourceVersion": "60787036", - "uid": "8c3dc6fe-e730-4364-8445-dc5a05ad2b0f" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-notification-server" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_HOST", - "valueFrom": { - "configMapKeyRef": { - "key": "maserNotificationServer", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_ATTRIBUTES", - "value": "customerGUID" - }, - { - "name": "CA_NOTIFICATION_SERVER_WS_PORT", - "value": "8001" - }, - { - "name": "CA_NOTIFICATION_SERVER_PORT", - "value": "8002" - } - ], - "image": "quay.io/armosec/notification-server-ubi:89", - "imagePullPolicy": "Always", - "name": "ca-notification-server", - "ports": [ - { - "containerPort": 8001, - "name": "websocket", - "protocol": "TCP" - }, - { - "containerPort": 8002, - "name": "rest-api", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "50Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:11Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:59Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "ReplicaSet \"ca-notification-server-6fd966c875\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Workload: ca-ocimage does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-ocimage\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-ocimage\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-ocimage:63\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-ocimage\",\"ports\":[{\"containerPort\":8080,\"name\":\"ca-ocimage-port\"}],\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:51Z", - "generation": 1, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-ocimage\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:04Z" - } - ], - "name": "ca-ocimage", - "namespace": "cyberarmor-system", - "resourceVersion": "60786986", - "uid": "a6d37edf-b144-4677-91b3-73c73d9c7df6" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-ocimage" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-ocimage:63", - "imagePullPolicy": "Always", - "name": "ca-ocimage", - "ports": [ - { - "containerPort": 8080, - "name": "ca-ocimage-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "1", - "memory": "1000Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:04Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:51Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "ReplicaSet \"ca-ocimage-5576ff7d7d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Workload: ca-oracle does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-oracle\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-oracle\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_ORACLE_PORT\",\"value\":\"4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8002\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-oracle-ubi:11\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-oracle\",\"ports\":[{\"containerPort\":4000,\"name\":\"ca-oracle\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:19:01Z", - "generation": 1, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-oracle\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:19:01Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-oracle", - "namespace": "cyberarmor-system", - "resourceVersion": "60787203", - "uid": "da3dd21c-bf13-4d2a-97da-ca80b94d08d3" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-oracle" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_ORACLE_PORT", - "value": "4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8002" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-oracle-ubi:11", - "imagePullPolicy": "Always", - "name": "ca-oracle", - "ports": [ - { - "containerPort": 4000, - "name": "ca-oracle", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:19:01Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-oracle-6c98c6bdbf\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Workload: ca-posture does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-posture\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-posture\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8001\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-posture-ubi:112\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-posture\",\"ports\":[{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/resources/config\",\"name\":\"ca-posture-score-config\",\"readOnly\":false},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"},{\"configMap\":{\"items\":[{\"key\":\"resourcesdict.json\",\"path\":\"resourcesdict.json\"},{\"key\":\"frameworkdict.json\",\"path\":\"frameworkdict.json\"}],\"name\":\"ca-posture-score-config\"},\"name\":\"ca-posture-score-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:58Z", - "generation": 1, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-posture\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/resources/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-posture-score-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:58Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:45Z" - } - ], - "name": "ca-posture", - "namespace": "cyberarmor-system", - "resourceVersion": "60787259", - "uid": "f41f4dc1-cfb0-4201-bca7-f1cf0b72b6b7" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-posture" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8001" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-posture-ubi:112", - "imagePullPolicy": "Always", - "name": "ca-posture", - "ports": [ - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "500m", - "memory": "100Mi" - }, - "requests": { - "cpu": "100m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/resources/config", - "name": "ca-posture-score-config" - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "resourcesdict.json", - "path": "resourcesdict.json" - }, - { - "key": "frameworkdict.json", - "path": "frameworkdict.json" - } - ], - "name": "ca-posture-score-config" - }, - "name": "ca-posture-score-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:45Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:58Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "ReplicaSet \"ca-posture-5996968d7b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Workload: ca-rbac does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-rbac\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-rbac\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"S3_BUCKET\",\"value\":\"ca-kubernetes-rbac-db-dev\"},{\"name\":\"AWS_REGION\",\"value\":\"eu-west-1\"},{\"name\":\"AWS_ACCESS_KEY_ID\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keyid\",\"name\":\"ca-rbac\"}}},{\"name\":\"AWS_SECRET_ACCESS_KEY\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keysecret\",\"name\":\"ca-rbac\"}}}],\"image\":\"quay.io/armosec/k8s-ca-rbac-scanner-ubi:20\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-rbac\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"400Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:50Z", - "generation": 1, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-rbac\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AWS_ACCESS_KEY_ID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"AWS_REGION\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"AWS_SECRET_ACCESS_KEY\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"S3_BUCKET\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:13Z" - } - ], - "name": "ca-rbac", - "namespace": "cyberarmor-system", - "resourceVersion": "60787051", - "uid": "d5898a09-2489-4254-b210-0725ddb2427a" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-rbac" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "S3_BUCKET", - "value": "ca-kubernetes-rbac-db-dev" - }, - { - "name": "AWS_REGION", - "value": "eu-west-1" - }, - { - "name": "AWS_ACCESS_KEY_ID", - "valueFrom": { - "secretKeyRef": { - "key": "keyid", - "name": "ca-rbac" - } - } - }, - { - "name": "AWS_SECRET_ACCESS_KEY", - "valueFrom": { - "secretKeyRef": { - "key": "keysecret", - "name": "ca-rbac" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-rbac-scanner-ubi:20", - "imagePullPolicy": "Always", - "name": "ca-rbac", - "resources": { - "limits": { - "cpu": "200m", - "memory": "400Mi" - }, - "requests": { - "cpu": "10m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:13Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:50Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "ReplicaSet \"ca-rbac-75c8cfd6b4\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Workload: ca-vuln-scan does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-vuln-scan\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-vuln-scan\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"EVENT_RECEIVER_URL\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\",\"value\":\"4\"}],\"image\":\"quay.io/armosec/k8s-ca-vuln-scan-ubi:84\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-vuln-scan\",\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1.5Gi\"},\"requests\":{\"cpu\":\"500m\",\"memory\":\"1Gi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:47Z", - "generation": 1, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-vuln-scan\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EVENT_RECEIVER_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:00Z" - } - ], - "name": "ca-vuln-scan", - "namespace": "cyberarmor-system", - "resourceVersion": "60786938", - "uid": "9ea3d6cb-c6c0-423f-aab2-630827939285" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-vuln-scan" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "EVENT_RECEIVER_URL", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_MAX_VULN_SCAN_ROUTINS", - "value": "4" - } - ], - "image": "quay.io/armosec/k8s-ca-vuln-scan-ubi:84", - "imagePullPolicy": "Always", - "name": "ca-vuln-scan", - "resources": { - "limits": { - "cpu": "1", - "memory": "1536Mi" - }, - "requests": { - "cpu": "500m", - "memory": "1Gi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:00Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:47Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "ReplicaSet \"ca-vuln-scan-75b499df8c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Workload: ca-webhook does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-webhook\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-webhook\"}},\"template\":{\"metadata\":{\"annotations\":{\"certificate\":\"d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt\"},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-tlsCertFile=/etc/webhook/certs/tls.crt\",\"-tlsKeyFile=/etc/webhook/certs/tls.key\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_WEBHOOK_NAME\",\"value\":\"ca-webhook\"},{\"name\":\"CA_WEBHOOK_PORT\",\"value\":\"443\"},{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_LOGIN_SECRET_NAME\",\"value\":\"ca-login\"},{\"name\":\"CA_ORACLE_SERVER\",\"value\":\"http://ca-oracle:4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"http://ca-notification-server:8001\"},{\"name\":\"CA_OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-webhook-ubi:606\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-webhook\",\"ports\":[{\"containerPort\":443,\"name\":\"mutating-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"600Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"100Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/cazips\",\"name\":\"zip-download\"},{\"mountPath\":\"/etc/webhook/certs\",\"name\":\"ca-cluster-certificate\",\"readOnly\":true},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"emptyDir\":{},\"name\":\"zip-download\"},{\"name\":\"ca-cluster-certificate\",\"secret\":{\"secretName\":\"ca-cluster-certificate\"}},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:46Z", - "generation": 1, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:certificate": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-webhook\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_LOGIN_SECRET_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/cazips\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/webhook/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-cluster-certificate\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"zip-download\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:16Z" - } - ], - "name": "ca-webhook", - "namespace": "cyberarmor-system", - "resourceVersion": "60787072", - "uid": "c968fe90-8480-471f-bdf1-fa98447ce1d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-webhook" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "certificate": "d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt" - }, - "creationTimestamp": null, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-tlsCertFile=/etc/webhook/certs/tls.crt", - "-tlsKeyFile=/etc/webhook/certs/tls.key", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_WEBHOOK_NAME", - "value": "ca-webhook" - }, - { - "name": "CA_WEBHOOK_PORT", - "value": "443" - }, - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_LOGIN_SECRET_NAME", - "value": "ca-login" - }, - { - "name": "CA_ORACLE_SERVER", - "value": "http://ca-oracle:4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "http://ca-notification-server:8001" - }, - { - "name": "CA_OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-webhook-ubi:606", - "imagePullPolicy": "Always", - "name": "ca-webhook", - "ports": [ - { - "containerPort": 443, - "name": "mutating-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "600Mi" - }, - "requests": { - "cpu": "300m", - "memory": "100Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/cazips", - "name": "zip-download" - }, - { - "mountPath": "/etc/webhook/certs", - "name": "ca-cluster-certificate", - "readOnly": true - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "emptyDir": {}, - "name": "zip-download" - }, - { - "name": "ca-cluster-certificate", - "secret": { - "defaultMode": 420, - "secretName": "ca-cluster-certificate" - } - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:16Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:46Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "ReplicaSet \"ca-webhook-7dd8bbd798\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Workload: ca-websocket does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-websocket\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-websocket\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_VULN_SCAN_SCHEDULE\",\"value\":\"@every 11h\"},{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\",\"value\":\"@every 12h\"},{\"name\":\"CA_DEBUG_SIGNER\",\"value\":null}],\"image\":\"quay.io/armosec/k8s-ca-websocket-ubi:406\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-websocket\",\"ports\":[{\"containerPort\":4002,\"name\":\"trigger-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:43Z", - "generation": 1, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-websocket\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_DEBUG_SIGNER\"}": { - ".": {}, - "f:name": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_VULN_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:14Z" - } - ], - "name": "ca-websocket", - "namespace": "cyberarmor-system", - "resourceVersion": "60787065", - "uid": "914f30e9-d858-4945-9314-cbd3422ebaab" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-websocket" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_VULN_SCAN_SCHEDULE", - "value": "@every 11h" - }, - { - "name": "CA_POSTURE_SCAN_SCHEDULE", - "value": "@every 12h" - }, - { - "name": "CA_DEBUG_SIGNER" - } - ], - "image": "quay.io/armosec/k8s-ca-websocket-ubi:406", - "imagePullPolicy": "Always", - "name": "ca-websocket", - "ports": [ - { - "containerPort": 4002, - "name": "trigger-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "1000Mi" - }, - "requests": { - "cpu": "300m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:14Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:43Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "ReplicaSet \"ca-websocket-857758846f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Workload: adservice does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"adservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"adservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"adservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/adservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"name\":\"server\",\"ports\":[{\"containerPort\":9555}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"180Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:51Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":9555,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:12Z" - } - ], - "name": "adservice", - "namespace": "hipster", - "resourceVersion": "61263240", - "uid": "368bea36-82be-4c28-8607-cf931a836185" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "adservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6415784d-d96b-4866-9c10-d571c8d8fd35", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:29", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-adservice" - }, - "creationTimestamp": null, - "labels": { - "app": "adservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/adservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 9555, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "300Mi" - }, - "requests": { - "cpu": "200m", - "memory": "180Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:24Z", - "lastUpdateTime": "2021-10-12T00:12:24Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:51Z", - "lastUpdateTime": "2021-10-13T00:28:12Z", - "message": "ReplicaSet \"adservice-7864446d5c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Workload: cartservice does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"cartservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"cartservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"cartservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"REDIS_ADDR\",\"value\":\"redis-cart:6379\"}],\"image\":\"gcr.io/google-samples/microservices-demo/cartservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15,\"periodSeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":7070}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:47Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"REDIS_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7070,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T09:40:08Z" - } - ], - "name": "cartservice", - "namespace": "hipster", - "resourceVersion": "61443544", - "uid": "df767287-ffc1-4559-b7fd-32b09bf6208c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "cartservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "7ced7c5c-c483-40b3-b6bc-8829339dc3e1", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:04", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-cartservice" - }, - "creationTimestamp": null, - "labels": { - "app": "cartservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "REDIS_ADDR", - "value": "redis-cart:6379" - } - ], - "image": "gcr.io/google-samples/microservices-demo/cartservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7070, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "128Mi" - }, - "requests": { - "cpu": "200m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-13T00:27:35Z", - "message": "ReplicaSet \"cartservice-7c8f8f9ddd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T09:40:08Z", - "lastUpdateTime": "2021-10-13T09:40:08Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Workload: checkoutservice does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"checkoutservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"checkoutservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"checkoutservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"5050\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"PAYMENT_SERVICE_ADDR\",\"value\":\"paymentservice:50051\"},{\"name\":\"EMAIL_SERVICE_ADDR\",\"value\":\"emailservice:5000\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"}],\"image\":\"gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":5050}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:42Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EMAIL_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PAYMENT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":5050,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:42Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:41Z" - } - ], - "name": "checkoutservice", - "namespace": "hipster", - "resourceVersion": "61262985", - "uid": "b5e6a8d8-1ec6-4acc-bf14-e3bb28bff284" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "checkoutservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "bebad8bb-8728-4813-ae19-d22a38a289a5", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:28", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-checkoutservice" - }, - "creationTimestamp": null, - "labels": { - "app": "checkoutservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "5050" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "PAYMENT_SERVICE_ADDR", - "value": "paymentservice:50051" - }, - { - "name": "EMAIL_SERVICE_ADDR", - "value": "emailservice:5000" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - } - ], - "image": "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 5050, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T14:05:32Z", - "lastUpdateTime": "2021-10-12T14:05:32Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:42Z", - "lastUpdateTime": "2021-10-13T00:27:42Z", - "message": "ReplicaSet \"checkoutservice-86c564466c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Workload: currencyservice does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"currencyservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"currencyservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"currencyservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"7000\"}],\"image\":\"gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":7000,\"name\":\"grpc\"}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T08:37:54Z" - } - ], - "name": "currencyservice", - "namespace": "hipster", - "resourceVersion": "61423238", - "uid": "167b75e1-1be2-4764-aaad-dbb1ae248d3c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "currencyservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "4aa34494-0348-4859-9e29-56df9baf52ba", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-currencyservice" - }, - "creationTimestamp": null, - "labels": { - "app": "currencyservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "7000" - } - ], - "image": "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7000, - "name": "grpc", - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:29:19Z", - "message": "ReplicaSet \"currencyservice-544b6d849c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T08:37:54Z", - "lastUpdateTime": "2021-10-13T08:37:54Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Workload: emailservice does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"emailservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"emailservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"emailservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"DISABLE_PROFILER\",\"value\":\"1\"}],\"image\":\"gcr.io/google-samples/microservices-demo/emailservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:41Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"DISABLE_PROFILER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:41Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:07Z" - } - ], - "name": "emailservice", - "namespace": "hipster", - "resourceVersion": "61263204", - "uid": "9959433f-c964-4e6d-a2d7-3d1b9b617948" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "emailservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "e8aa9826-2367-44e1-9aad-a6d617b0fa06", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:48", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-emailservice" - }, - "creationTimestamp": null, - "labels": { - "app": "emailservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "DISABLE_PROFILER", - "value": "1" - } - ], - "image": "gcr.io/google-samples/microservices-demo/emailservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-12T00:11:47Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:41Z", - "lastUpdateTime": "2021-10-13T00:28:08Z", - "message": "ReplicaSet \"emailservice-cc7c4cd87\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Workload: frontend does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"frontend\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"frontend\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"frontend\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"},{\"name\":\"RECOMMENDATION_SERVICE_ADDR\",\"value\":\"recommendationservice:8080\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"CHECKOUT_SERVICE_ADDR\",\"value\":\"checkoutservice:5050\"},{\"name\":\"AD_SERVICE_ADDR\",\"value\":\"adservice:9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/frontend:v0.2.3\",\"livenessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-liveness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-readiness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:44Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AD_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CHECKOUT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"RECOMMENDATION_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:44Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:34Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:22Z" - } - ], - "name": "frontend", - "namespace": "hipster", - "resourceVersion": "61263336", - "uid": "86b92d9e-22ad-4f0a-be26-41343f05f0d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "frontend" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9611f05f-4a8b-48ff-9722-e6a2ec702d65", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:57", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-frontend", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "frontend", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - }, - { - "name": "RECOMMENDATION_SERVICE_ADDR", - "value": "recommendationservice:8080" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "CHECKOUT_SERVICE_ADDR", - "value": "checkoutservice:5050" - }, - { - "name": "AD_SERVICE_ADDR", - "value": "adservice:9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/frontend:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-liveness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-readiness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:04Z", - "lastUpdateTime": "2021-10-12T00:12:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:44Z", - "lastUpdateTime": "2021-10-13T00:28:23Z", - "message": "ReplicaSet \"frontend-c747f6f47\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Workload: loadgenerator does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"loadgenerator\",\"namespace\":\"hipster\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"loadgenerator\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"loadgenerator\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"FRONTEND_ADDR\",\"value\":\"frontend:80\"},{\"name\":\"USERS\",\"value\":\"10\"}],\"image\":\"gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3\",\"name\":\"main\",\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"256Mi\"}}}],\"restartPolicy\":\"Always\",\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"main\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"FRONTEND_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"USERS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:38Z" - } - ], - "name": "loadgenerator", - "namespace": "hipster", - "resourceVersion": "61263451", - "uid": "e9200650-d25d-43f2-b1bc-4615beaed50c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "loadgenerator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "baca3d0f-fdc8-42c6-a9b1-ee29b3d173e0", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:26", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-loadgenerator", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "loadgenerator", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "FRONTEND_ADDR", - "value": "frontend:80" - }, - { - "name": "USERS", - "value": "10" - } - ], - "image": "gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "name": "main", - "resources": { - "limits": { - "cpu": "500m", - "memory": "512Mi" - }, - "requests": { - "cpu": "300m", - "memory": "256Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-13T00:24:15Z", - "lastUpdateTime": "2021-10-13T00:24:15Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:28:38Z", - "message": "ReplicaSet \"loadgenerator-6dcb6ffc4f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Workload: paymentservice does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"paymentservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"paymentservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"paymentservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:45Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:45Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:29:27Z" - } - ], - "name": "paymentservice", - "namespace": "hipster", - "resourceVersion": "61263785", - "uid": "ab21c30f-d153-4ea8-982e-e12a71745dae" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "paymentservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "60b5720d-99b5-47a0-8bc4-656b372a6d17", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:52", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-paymentservice" - }, - "creationTimestamp": null, - "labels": { - "app": "paymentservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:45Z", - "lastUpdateTime": "2021-10-13T00:29:27Z", - "message": "ReplicaSet \"paymentservice-849b876ffd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Workload: productcatalogservice does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"productcatalogservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"productcatalogservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"productcatalogservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":3550}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:46Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":3550,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:57Z" - } - ], - "name": "productcatalogservice", - "namespace": "hipster", - "resourceVersion": "61263117", - "uid": "50b29b6e-0f97-43b8-9555-a53d9c0e18f9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "productcatalogservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9bb4cc06-3907-401b-919f-c2974a623068", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-productcatalogservice" - }, - "creationTimestamp": null, - "labels": { - "app": "productcatalogservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 3550, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:46Z", - "lastUpdateTime": "2021-10-13T00:27:57Z", - "message": "ReplicaSet \"productcatalogservice-586fd876d5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Workload: recommendationservice does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"recommendationservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"recommendationservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"recommendationservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"450Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"220Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:43Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:37Z" - } - ], - "name": "recommendationservice", - "namespace": "hipster", - "resourceVersion": "61263443", - "uid": "00437f28-24c4-4759-ab93-f0be948eabc9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "recommendationservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "8cace306-b3ce-4f2f-8a6f-b122873b4eee", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-recommendationservice" - }, - "creationTimestamp": null, - "labels": { - "app": "recommendationservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "450Mi" - }, - "requests": { - "cpu": "100m", - "memory": "220Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-12T00:11:50Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:43Z", - "lastUpdateTime": "2021-10-13T00:28:37Z", - "message": "ReplicaSet \"recommendationservice-54b7b7b95d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Workload: redis-cart does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"redis-cart\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"redis-cart\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"redis-cart\"}},\"spec\":{\"containers\":[{\"image\":\"redis:alpine\",\"livenessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"name\":\"redis\",\"ports\":[{\"containerPort\":6379}],\"readinessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"resources\":{\"limits\":{\"cpu\":\"125m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"70m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/data\",\"name\":\"redis-data\"}]}],\"volumes\":[{\"emptyDir\":{},\"name\":\"redis-data\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:50Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"redis\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":6379,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/data\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"redis-data\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:38Z" - } - ], - "name": "redis-cart", - "namespace": "hipster", - "resourceVersion": "61262948", - "uid": "76b3aebb-9ec5-479e-81ae-975ccf1bc6ec" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "redis-cart" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "838a7c21-618b-4693-a13b-838a9231ca58", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-redis-cart" - }, - "creationTimestamp": null, - "labels": { - "app": "redis-cart", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "image": "redis:alpine", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "name": "redis", - "ports": [ - { - "containerPort": 6379, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "125m", - "memory": "256Mi" - }, - "requests": { - "cpu": "70m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/data", - "name": "redis-data" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "emptyDir": {}, - "name": "redis-data" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:57Z", - "lastUpdateTime": "2021-10-12T00:11:57Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-13T00:27:38Z", - "message": "ReplicaSet \"redis-cart-594778c8b9\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Workload: shippingservice does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"shippingservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"shippingservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"shippingservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:49Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:49Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:11Z" - } - ], - "name": "shippingservice", - "namespace": "hipster", - "resourceVersion": "61262726", - "uid": "febd2fe5-0e28-448e-aabd-31904ebb82a9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "shippingservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6503b850-839c-4b73-95ab-195d27b3c10d", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:26:58", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-shippingservice" - }, - "creationTimestamp": null, - "labels": { - "app": "shippingservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:00Z", - "lastUpdateTime": "2021-10-12T00:12:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:49Z", - "lastUpdateTime": "2021-10-13T00:27:11Z", - "message": "ReplicaSet \"shippingservice-758c9b4d4b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Workload: kube-dns does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":\"10%\",\"maxUnavailable\":0}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"kubedns\",\"prometheus.io/port\":\"10054\",\"prometheus.io/scrape\":\"true\",\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"labels\":{\"k8s-app\":\"kube-dns\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchExpressions\":[{\"key\":\"k8s-app\",\"operator\":\"In\",\"values\":[\"kube-dns\"]}]},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"--domain=cluster.local.\",\"--dns-port=10053\",\"--config-dir=/kube-dns-config\",\"--v=2\"],\"env\":[{\"name\":\"PROMETHEUS_PORT\",\"value\":\"10055\"}],\"image\":\"gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/kubedns\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"kubedns\",\"ports\":[{\"containerPort\":10053,\"name\":\"dns-local\",\"protocol\":\"UDP\"},{\"containerPort\":10053,\"name\":\"dns-tcp-local\",\"protocol\":\"TCP\"},{\"containerPort\":10055,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readiness\",\"port\":8081,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":3,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"memory\":\"210Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"70Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001},\"volumeMounts\":[{\"mountPath\":\"/kube-dns-config\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"-v=2\",\"-logtostderr\",\"-configDir=/etc/k8s/dns/dnsmasq-nanny\",\"-restartDnsmasq=true\",\"--\",\"-k\",\"--cache-size=1000\",\"--no-negcache\",\"--dns-forward-max=1500\",\"--log-facility=-\",\"--server=/cluster.local/127.0.0.1#10053\",\"--server=/in-addr.arpa/127.0.0.1#10053\",\"--server=/ip6.arpa/127.0.0.1#10053\"],\"image\":\"gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/dnsmasq\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"dnsmasq\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"150m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"capabilities\":{\"add\":[\"NET_BIND_SERVICE\",\"SETGID\"],\"drop\":[\"all\"]}},\"volumeMounts\":[{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"--v=2\",\"--logtostderr\",\"--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV\",\"--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV\"],\"image\":\"gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/metrics\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"sidecar\",\"ports\":[{\"containerPort\":10054,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001}}],\"dnsPolicy\":\"Default\",\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 4, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:scheduler.alpha.kubernetes.io/critical-pod": {}, - "f:seccomp.security.alpha.kubernetes.io/pod": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:podAntiAffinity": { - ".": {}, - "f:preferredDuringSchedulingIgnoredDuringExecution": {} - } - }, - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:capabilities": { - ".": {}, - "f:add": {}, - "f:drop": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"kubedns\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PROMETHEUS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10053,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10053,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10055,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/kube-dns-config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"sidecar\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10054,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - "f:image": {} - }, - "k:{\"name\":\"kubedns\"}": { - "f:image": {} - }, - "k:{\"name\":\"sidecar\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:06:26Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "53109905", - "uid": "cd5cca24-7cd2-4548-a5d3-d90beb79f9e8" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 2, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "10%", - "maxUnavailable": 0 - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "kubedns", - "prometheus.io/port": "10054", - "prometheus.io/scrape": "true", - "scheduler.alpha.kubernetes.io/critical-pod": "", - "seccomp.security.alpha.kubernetes.io/pod": "runtime/default" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns" - } - }, - "spec": { - "affinity": { - "podAntiAffinity": { - "preferredDuringSchedulingIgnoredDuringExecution": [ - { - "podAffinityTerm": { - "labelSelector": { - "matchExpressions": [ - { - "key": "k8s-app", - "operator": "In", - "values": [ - "kube-dns" - ] - } - ] - }, - "topologyKey": "kubernetes.io/hostname" - }, - "weight": 100 - } - ] - } - }, - "containers": [ - { - "args": [ - "--domain=cluster.local.", - "--dns-port=10053", - "--config-dir=/kube-dns-config", - "--v=2" - ], - "env": [ - { - "name": "PROMETHEUS_PORT", - "value": "10055" - } - ], - "image": "gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/kubedns", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "kubedns", - "ports": [ - { - "containerPort": 10053, - "name": "dns-local", - "protocol": "UDP" - }, - { - "containerPort": 10053, - "name": "dns-tcp-local", - "protocol": "TCP" - }, - { - "containerPort": 10055, - "name": "metrics", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/readiness", - "port": 8081, - "scheme": "HTTP" - }, - "initialDelaySeconds": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "resources": { - "limits": { - "memory": "210Mi" - }, - "requests": { - "cpu": "100m", - "memory": "70Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/kube-dns-config", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "-v=2", - "-logtostderr", - "-configDir=/etc/k8s/dns/dnsmasq-nanny", - "-restartDnsmasq=true", - "--", - "-k", - "--cache-size=1000", - "--no-negcache", - "--dns-forward-max=1500", - "--log-facility=-", - "--server=/cluster.local/127.0.0.1#10053", - "--server=/in-addr.arpa/127.0.0.1#10053", - "--server=/ip6.arpa/127.0.0.1#10053" - ], - "image": "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/dnsmasq", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "dnsmasq", - "ports": [ - { - "containerPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "150m", - "memory": "20Mi" - } - }, - "securityContext": { - "capabilities": { - "add": [ - "NET_BIND_SERVICE", - "SETGID" - ], - "drop": [ - "all" - ] - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/k8s/dns/dnsmasq-nanny", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "--v=2", - "--logtostderr", - "--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV", - "--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV" - ], - "image": "gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/metrics", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "sidecar", - "ports": [ - { - "containerPort": 10054, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns", - "serviceAccountName": "kube-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 2, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-09-11T01:57:38Z", - "message": "ReplicaSet \"kube-dns-59844ff879\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:06:26Z", - "lastUpdateTime": "2021-09-25T17:06:26Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 4, - "readyReplicas": 2, - "replicas": 2, - "updatedReplicas": 2 - } - } - ] - } - }, - { - "alertMessage": "Workload: kube-proxy does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "6", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-proxy\"},\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-proxy\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-proxy\"}},\"spec\":{\"containers\":[{\"command\":[\"/bin/sh\",\"-c\",\"kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\\u003e\\u003e/var/log/kube-proxy.log 2\\u003e\\u00261\"],\"env\":[{\"name\":\"KUBERNETES_SERVICE_HOST\",\"value\":\"34.78.97.243\"}],\"image\":\"gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001\",\"name\":\"kube-proxy\",\"resources\":{\"requests\":{\"cpu\":\"100m\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/log\",\"name\":\"varlog\",\"readOnly\":false},{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/lib/modules\",\"name\":\"lib-modules\",\"readOnly\":true}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\",\"node.kubernetes.io/kube-proxy-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"kube-proxy\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/log\"},\"name\":\"varlog\"},{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"hostPath\":{\"path\":\"/lib/modules\"},\"name\":\"lib-modules\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "generation": 6, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-proxy" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBERNETES_SERVICE_HOST\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/kube-proxy-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - "f:command": {}, - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:44Z" - } - ], - "name": "kube-proxy", - "namespace": "kube-system", - "resourceVersion": "52161714", - "uid": "bb6f9ab0-e586-407b-95c0-773637c696e8" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-proxy" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-proxy" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "env": [ - { - "name": "KUBERNETES_SERVICE_HOST", - "value": "34.78.97.243" - } - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux", - "node.kubernetes.io/kube-proxy-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "kube-proxy", - "serviceAccountName": "kube-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 6 - } - } - ] - } - }, - { - "alertMessage": "Workload: metadata-proxy-v0.1 does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"},\"name\":\"metadata-proxy-v0.1\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metadata-proxy\",\"version\":\"v0.1\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"}},\"spec\":{\"containers\":[{\"args\":[\"--addr=0.0.0.0:988\"],\"image\":\"k8s.gcr.io/metadata-proxy:v0.1.12\",\"name\":\"metadata-proxy\",\"resources\":{\"limits\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"},\"requests\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"}},\"securityContext\":{\"privileged\":true}}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"cloud.google.com/metadata-proxy-ready\":\"true\",\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"metadata-proxy\",\"terminationGracePeriodSeconds\":30,\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 3, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:cloud.google.com/metadata-proxy-ready": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - "f:args": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - } - ], - "name": "metadata-proxy-v0.1", - "namespace": "kube-system", - "resourceVersion": "25934435", - "uid": "94bf5845-f77b-47d4-bcec-e78549b4d8a3" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metadata-proxy", - "version": "v0.1" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--addr=0.0.0.0:988" - ], - "image": "k8s.gcr.io/metadata-proxy:v0.1.12", - "imagePullPolicy": "IfNotPresent", - "name": "metadata-proxy", - "resources": { - "limits": { - "cpu": "30m", - "memory": "25Mi" - }, - "requests": { - "cpu": "30m", - "memory": "25Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "cloud.google.com/metadata-proxy-ready": "true", - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "metadata-proxy", - "serviceAccountName": "metadata-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 3 - } - } - ] - } - }, - { - "alertMessage": "Workload: node-local-dns does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"node-local-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"node-local-dns\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"nodelocaldns\",\"components.gke.io/component-version\":\"1.4.0\",\"prometheus.io/port\":\"9253\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"k8s-app\":\"node-local-dns\"}},\"spec\":{\"containers\":[{\"args\":[\"-localip\",\"169.254.20.10,10.72.0.10\",\"-conf\",\"/etc/Corefile\",\"-upstreamsvc\",\"kube-dns-upstream\",\"-kubednscm\",\"/etc/kube-dns\"],\"image\":\"gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1\",\"livenessProbe\":{\"httpGet\":{\"host\":\"169.254.20.10\",\"path\":\"/health\",\"port\":8080},\"initialDelaySeconds\":60,\"timeoutSeconds\":5},\"name\":\"node-cache\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"},{\"containerPort\":9253,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"25m\",\"memory\":\"5Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/etc/coredns\",\"name\":\"config-volume\"},{\"mountPath\":\"/etc/kube-dns\",\"name\":\"kube-dns-config\"}]}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"addon.gke.io/node-local-dns-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"node-local-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"},{\"configMap\":{\"items\":[{\"key\":\"Corefile\",\"path\":\"Corefile.base\"}],\"name\":\"node-local-dns\"},\"name\":\"config-volume\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"}}}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "node-local-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:host": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":9253,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/coredns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/kube-dns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:addon.gke.io/node-local-dns-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "53114241", - "uid": "5069e9ba-0784-41bf-9577-3757bcb3b6d6" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "node-local-dns" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "nodelocaldns", - "components.gke.io/component-version": "1.4.0", - "prometheus.io/port": "9253", - "prometheus.io/scrape": "true" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "node-local-dns" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-localip", - "169.254.20.10,10.72.0.10", - "-conf", - "/etc/Corefile", - "-upstreamsvc", - "kube-dns-upstream", - "-kubednscm", - "/etc/kube-dns" - ], - "image": "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "host": "169.254.20.10", - "path": "/health", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "node-cache", - "ports": [ - { - "containerPort": 53, - "hostPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "hostPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - }, - { - "containerPort": 9253, - "hostPort": 9253, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "25m", - "memory": "5Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/etc/coredns", - "name": "config-volume" - }, - { - "mountPath": "/etc/kube-dns", - "name": "kube-dns-config" - } - ] - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "addon.gke.io/node-local-dns-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "node-local-dns", - "serviceAccountName": "node-local-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "Corefile", - "path": "Corefile.base" - } - ], - "name": "node-local-dns" - }, - "name": "config-volume" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 2, - "updatedNumberScheduled": 7 - } - } - ] - } - }, - { - "alertMessage": "Workload: nvidia-gpu-device-plugin does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"nvidia-gpu-device-plugin\"},\"name\":\"nvidia-gpu-device-plugin\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"cloud.google.com/gke-accelerator\",\"operator\":\"Exists\"}]}]}}},\"containers\":[{\"command\":[\"/usr/bin/nvidia-gpu-device-plugin\",\"-logtostderr\",\"--enable-container-gpu-metrics\",\"--enable-health-monitoring\"],\"env\":[{\"name\":\"LD_LIBRARY_PATH\",\"value\":\"/usr/local/nvidia/lib64\"}],\"image\":\"gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317\",\"name\":\"nvidia-gpu-device-plugin\",\"ports\":[{\"containerPort\":2112,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/device-plugin\",\"name\":\"device-plugin\"},{\"mountPath\":\"/dev\",\"name\":\"dev\"},{\"mountPath\":\"/usr/local/nvidia\",\"name\":\"nvidia\"},{\"mountPath\":\"/var/lib/kubelet/pod-resources\",\"name\":\"pod-resources\"},{\"mountPath\":\"/proc\",\"name\":\"proc\"},{\"mountPath\":\"/etc/nvidia\",\"name\":\"nvidia-config\"}]}],\"priorityClassName\":\"system-node-critical\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/device-plugins\"},\"name\":\"device-plugin\"},{\"hostPath\":{\"path\":\"/dev\"},\"name\":\"dev\"},{\"hostPath\":{\"path\":\"/home/kubernetes/bin/nvidia\",\"type\":\"Directory\"},\"name\":\"nvidia\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/pod-resources\"},\"name\":\"pod-resources\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"proc\"},{\"hostPath\":{\"path\":\"/etc/nvidia\"},\"name\":\"nvidia-config\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:17Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "nvidia-gpu-device-plugin" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:nodeAffinity": { - ".": {}, - "f:requiredDuringSchedulingIgnoredDuringExecution": { - ".": {}, - "f:nodeSelectorTerms": {} - } - } - }, - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"LD_LIBRARY_PATH\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":2112,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/device-plugin\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/local/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet/pod-resources\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"dev\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"device-plugin\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"nvidia\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"pod-resources\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - "f:command": {}, - "f:image": {}, - "f:volumeMounts": { - "k:{\"mountPath\":\"/etc/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/proc\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:volumes": { - "k:{\"name\":\"nvidia-config\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"proc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "nvidia-gpu-device-plugin", - "namespace": "kube-system", - "resourceVersion": "25934477", - "uid": "14396a20-ecee-4671-aefe-2a5b9d2e0dde" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "spec": { - "affinity": { - "nodeAffinity": { - "requiredDuringSchedulingIgnoredDuringExecution": { - "nodeSelectorTerms": [ - { - "matchExpressions": [ - { - "key": "cloud.google.com/gke-accelerator", - "operator": "Exists" - } - ] - } - ] - } - } - }, - "containers": [ - { - "command": [ - "/usr/bin/nvidia-gpu-device-plugin", - "-logtostderr", - "--enable-container-gpu-metrics", - "--enable-health-monitoring" - ], - "env": [ - { - "name": "LD_LIBRARY_PATH", - "value": "/usr/local/nvidia/lib64" - } - ], - "image": "gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317", - "imagePullPolicy": "IfNotPresent", - "name": "nvidia-gpu-device-plugin", - "ports": [ - { - "containerPort": 2112, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "20Mi" - }, - "requests": { - "cpu": "50m", - "memory": "20Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/device-plugin", - "name": "device-plugin" - }, - { - "mountPath": "/dev", - "name": "dev" - }, - { - "mountPath": "/usr/local/nvidia", - "name": "nvidia" - }, - { - "mountPath": "/var/lib/kubelet/pod-resources", - "name": "pod-resources" - }, - { - "mountPath": "/proc", - "name": "proc" - }, - { - "mountPath": "/etc/nvidia", - "name": "nvidia-config" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/device-plugins", - "type": "" - }, - "name": "device-plugin" - }, - { - "hostPath": { - "path": "/dev", - "type": "" - }, - "name": "dev" - }, - { - "hostPath": { - "path": "/home/kubernetes/bin/nvidia", - "type": "Directory" - }, - "name": "nvidia" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/pod-resources", - "type": "" - }, - "name": "pod-resources" - }, - { - "hostPath": { - "path": "/proc", - "type": "" - }, - "name": "proc" - }, - { - "hostPath": { - "path": "/etc/nvidia", - "type": "" - }, - "name": "nvidia-config" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 2 - } - } - ] - } - }, - { - "alertMessage": "Workload: pdcsi-node does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - } - ] - } - }, - { - "alertMessage": "Workload: pdcsi-node-windows does not define any linux security hardening", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - } - ] - } - } - ], - "listInputResources": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-audit\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-audit\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CONFIG_FILES\",\"value\":\"/config/config.json\"},{\"name\":\"CA_SERVER_TYPE\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"cluster_kind\",\"name\":\"ca-audit\"}}}],\"image\":\"quay.io/armosec/k8s-ca-auditlog-ubi:21\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-audit\",\"ports\":[{\"containerPort\":443,\"name\":\"ca-audit-port\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/config\",\"name\":\"ca-audit\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-audit\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"config\",\"path\":\"config.json\"}],\"name\":\"ca-audit\"},\"name\":\"ca-audit\"},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:54Z", - "generation": 1, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CONFIG_FILES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_SERVER_TYPE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:54Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-audit", - "namespace": "cyberarmor-system", - "resourceVersion": "60787209", - "uid": "687f52ea-6956-4e8a-bb8c-7ea35a04b3f0" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-audit" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CONFIG_FILES", - "value": "/config/config.json" - }, - { - "name": "CA_SERVER_TYPE", - "valueFrom": { - "configMapKeyRef": { - "key": "cluster_kind", - "name": "ca-audit" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-auditlog-ubi:21", - "imagePullPolicy": "Always", - "name": "ca-audit", - "ports": [ - { - "containerPort": 443, - "name": "ca-audit-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/config", - "name": "ca-audit", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-audit", - "serviceAccountName": "ca-audit", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "config", - "path": "config.json" - } - ], - "name": "ca-audit" - }, - "name": "ca-audit" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:54Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-audit-c667df747\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-dashboard-aggregator\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-dashboard-aggregator\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-configtype=1\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-dashboard-aggregator\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"40Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:55Z", - "generation": 1, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-dashboard-aggregator\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:55Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T23:55:20Z" - } - ], - "name": "ca-dashboard-aggregator", - "namespace": "cyberarmor-system", - "resourceVersion": "61250607", - "uid": "0ba23569-e254-4388-b22f-30cc1eca031b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-dashboard-aggregator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-configtype=1", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173", - "imagePullPolicy": "Always", - "name": "ca-dashboard-aggregator", - "resources": { - "limits": { - "cpu": "200m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "40Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:18:55Z", - "lastUpdateTime": "2021-10-12T00:19:19Z", - "message": "ReplicaSet \"ca-dashboard-aggregator-5b8bdbc8f5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-12T23:55:20Z", - "lastUpdateTime": "2021-10-12T23:55:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-notification-server\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-notification-server\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"maserNotificationServer\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\",\"value\":\"customerGUID\"},{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\",\"value\":\"8001\"},{\"name\":\"CA_NOTIFICATION_SERVER_PORT\",\"value\":\"8002\"}],\"image\":\"quay.io/armosec/notification-server-ubi:89\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-notification-server\",\"ports\":[{\"containerPort\":8001,\"name\":\"websocket\"},{\"containerPort\":8002,\"name\":\"rest-api\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:59Z", - "generation": 1, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-notification-server\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8001,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:59Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:11Z" - } - ], - "name": "ca-notification-server", - "namespace": "cyberarmor-system", - "resourceVersion": "60787036", - "uid": "8c3dc6fe-e730-4364-8445-dc5a05ad2b0f" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-notification-server" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_HOST", - "valueFrom": { - "configMapKeyRef": { - "key": "maserNotificationServer", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_ATTRIBUTES", - "value": "customerGUID" - }, - { - "name": "CA_NOTIFICATION_SERVER_WS_PORT", - "value": "8001" - }, - { - "name": "CA_NOTIFICATION_SERVER_PORT", - "value": "8002" - } - ], - "image": "quay.io/armosec/notification-server-ubi:89", - "imagePullPolicy": "Always", - "name": "ca-notification-server", - "ports": [ - { - "containerPort": 8001, - "name": "websocket", - "protocol": "TCP" - }, - { - "containerPort": 8002, - "name": "rest-api", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "50Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:11Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:59Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "ReplicaSet \"ca-notification-server-6fd966c875\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-ocimage\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-ocimage\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-ocimage:63\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-ocimage\",\"ports\":[{\"containerPort\":8080,\"name\":\"ca-ocimage-port\"}],\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:51Z", - "generation": 1, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-ocimage\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:04Z" - } - ], - "name": "ca-ocimage", - "namespace": "cyberarmor-system", - "resourceVersion": "60786986", - "uid": "a6d37edf-b144-4677-91b3-73c73d9c7df6" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-ocimage" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-ocimage:63", - "imagePullPolicy": "Always", - "name": "ca-ocimage", - "ports": [ - { - "containerPort": 8080, - "name": "ca-ocimage-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "1", - "memory": "1000Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:04Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:51Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "ReplicaSet \"ca-ocimage-5576ff7d7d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-oracle\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-oracle\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_ORACLE_PORT\",\"value\":\"4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8002\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-oracle-ubi:11\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-oracle\",\"ports\":[{\"containerPort\":4000,\"name\":\"ca-oracle\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:19:01Z", - "generation": 1, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-oracle\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:19:01Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-oracle", - "namespace": "cyberarmor-system", - "resourceVersion": "60787203", - "uid": "da3dd21c-bf13-4d2a-97da-ca80b94d08d3" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-oracle" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_ORACLE_PORT", - "value": "4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8002" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-oracle-ubi:11", - "imagePullPolicy": "Always", - "name": "ca-oracle", - "ports": [ - { - "containerPort": 4000, - "name": "ca-oracle", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:19:01Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-oracle-6c98c6bdbf\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-posture\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-posture\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8001\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-posture-ubi:112\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-posture\",\"ports\":[{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/resources/config\",\"name\":\"ca-posture-score-config\",\"readOnly\":false},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"},{\"configMap\":{\"items\":[{\"key\":\"resourcesdict.json\",\"path\":\"resourcesdict.json\"},{\"key\":\"frameworkdict.json\",\"path\":\"frameworkdict.json\"}],\"name\":\"ca-posture-score-config\"},\"name\":\"ca-posture-score-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:58Z", - "generation": 1, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-posture\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/resources/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-posture-score-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:58Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:45Z" - } - ], - "name": "ca-posture", - "namespace": "cyberarmor-system", - "resourceVersion": "60787259", - "uid": "f41f4dc1-cfb0-4201-bca7-f1cf0b72b6b7" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-posture" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8001" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-posture-ubi:112", - "imagePullPolicy": "Always", - "name": "ca-posture", - "ports": [ - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "500m", - "memory": "100Mi" - }, - "requests": { - "cpu": "100m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/resources/config", - "name": "ca-posture-score-config" - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "resourcesdict.json", - "path": "resourcesdict.json" - }, - { - "key": "frameworkdict.json", - "path": "frameworkdict.json" - } - ], - "name": "ca-posture-score-config" - }, - "name": "ca-posture-score-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:45Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:58Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "ReplicaSet \"ca-posture-5996968d7b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-rbac\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-rbac\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"S3_BUCKET\",\"value\":\"ca-kubernetes-rbac-db-dev\"},{\"name\":\"AWS_REGION\",\"value\":\"eu-west-1\"},{\"name\":\"AWS_ACCESS_KEY_ID\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keyid\",\"name\":\"ca-rbac\"}}},{\"name\":\"AWS_SECRET_ACCESS_KEY\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keysecret\",\"name\":\"ca-rbac\"}}}],\"image\":\"quay.io/armosec/k8s-ca-rbac-scanner-ubi:20\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-rbac\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"400Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:50Z", - "generation": 1, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-rbac\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AWS_ACCESS_KEY_ID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"AWS_REGION\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"AWS_SECRET_ACCESS_KEY\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"S3_BUCKET\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:13Z" - } - ], - "name": "ca-rbac", - "namespace": "cyberarmor-system", - "resourceVersion": "60787051", - "uid": "d5898a09-2489-4254-b210-0725ddb2427a" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-rbac" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "S3_BUCKET", - "value": "ca-kubernetes-rbac-db-dev" - }, - { - "name": "AWS_REGION", - "value": "eu-west-1" - }, - { - "name": "AWS_ACCESS_KEY_ID", - "valueFrom": { - "secretKeyRef": { - "key": "keyid", - "name": "ca-rbac" - } - } - }, - { - "name": "AWS_SECRET_ACCESS_KEY", - "valueFrom": { - "secretKeyRef": { - "key": "keysecret", - "name": "ca-rbac" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-rbac-scanner-ubi:20", - "imagePullPolicy": "Always", - "name": "ca-rbac", - "resources": { - "limits": { - "cpu": "200m", - "memory": "400Mi" - }, - "requests": { - "cpu": "10m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:13Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:50Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "ReplicaSet \"ca-rbac-75c8cfd6b4\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-vuln-scan\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-vuln-scan\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"EVENT_RECEIVER_URL\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\",\"value\":\"4\"}],\"image\":\"quay.io/armosec/k8s-ca-vuln-scan-ubi:84\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-vuln-scan\",\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1.5Gi\"},\"requests\":{\"cpu\":\"500m\",\"memory\":\"1Gi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:47Z", - "generation": 1, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-vuln-scan\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EVENT_RECEIVER_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:00Z" - } - ], - "name": "ca-vuln-scan", - "namespace": "cyberarmor-system", - "resourceVersion": "60786938", - "uid": "9ea3d6cb-c6c0-423f-aab2-630827939285" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-vuln-scan" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "EVENT_RECEIVER_URL", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_MAX_VULN_SCAN_ROUTINS", - "value": "4" - } - ], - "image": "quay.io/armosec/k8s-ca-vuln-scan-ubi:84", - "imagePullPolicy": "Always", - "name": "ca-vuln-scan", - "resources": { - "limits": { - "cpu": "1", - "memory": "1536Mi" - }, - "requests": { - "cpu": "500m", - "memory": "1Gi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:00Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:47Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "ReplicaSet \"ca-vuln-scan-75b499df8c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-webhook\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-webhook\"}},\"template\":{\"metadata\":{\"annotations\":{\"certificate\":\"d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt\"},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-tlsCertFile=/etc/webhook/certs/tls.crt\",\"-tlsKeyFile=/etc/webhook/certs/tls.key\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_WEBHOOK_NAME\",\"value\":\"ca-webhook\"},{\"name\":\"CA_WEBHOOK_PORT\",\"value\":\"443\"},{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_LOGIN_SECRET_NAME\",\"value\":\"ca-login\"},{\"name\":\"CA_ORACLE_SERVER\",\"value\":\"http://ca-oracle:4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"http://ca-notification-server:8001\"},{\"name\":\"CA_OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-webhook-ubi:606\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-webhook\",\"ports\":[{\"containerPort\":443,\"name\":\"mutating-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"600Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"100Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/cazips\",\"name\":\"zip-download\"},{\"mountPath\":\"/etc/webhook/certs\",\"name\":\"ca-cluster-certificate\",\"readOnly\":true},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"emptyDir\":{},\"name\":\"zip-download\"},{\"name\":\"ca-cluster-certificate\",\"secret\":{\"secretName\":\"ca-cluster-certificate\"}},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:46Z", - "generation": 1, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:certificate": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-webhook\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_LOGIN_SECRET_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/cazips\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/webhook/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-cluster-certificate\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"zip-download\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:16Z" - } - ], - "name": "ca-webhook", - "namespace": "cyberarmor-system", - "resourceVersion": "60787072", - "uid": "c968fe90-8480-471f-bdf1-fa98447ce1d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-webhook" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "certificate": "d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt" - }, - "creationTimestamp": null, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-tlsCertFile=/etc/webhook/certs/tls.crt", - "-tlsKeyFile=/etc/webhook/certs/tls.key", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_WEBHOOK_NAME", - "value": "ca-webhook" - }, - { - "name": "CA_WEBHOOK_PORT", - "value": "443" - }, - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_LOGIN_SECRET_NAME", - "value": "ca-login" - }, - { - "name": "CA_ORACLE_SERVER", - "value": "http://ca-oracle:4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "http://ca-notification-server:8001" - }, - { - "name": "CA_OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-webhook-ubi:606", - "imagePullPolicy": "Always", - "name": "ca-webhook", - "ports": [ - { - "containerPort": 443, - "name": "mutating-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "600Mi" - }, - "requests": { - "cpu": "300m", - "memory": "100Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/cazips", - "name": "zip-download" - }, - { - "mountPath": "/etc/webhook/certs", - "name": "ca-cluster-certificate", - "readOnly": true - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "emptyDir": {}, - "name": "zip-download" - }, - { - "name": "ca-cluster-certificate", - "secret": { - "defaultMode": 420, - "secretName": "ca-cluster-certificate" - } - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:16Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:46Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "ReplicaSet \"ca-webhook-7dd8bbd798\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-websocket\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-websocket\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_VULN_SCAN_SCHEDULE\",\"value\":\"@every 11h\"},{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\",\"value\":\"@every 12h\"},{\"name\":\"CA_DEBUG_SIGNER\",\"value\":null}],\"image\":\"quay.io/armosec/k8s-ca-websocket-ubi:406\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-websocket\",\"ports\":[{\"containerPort\":4002,\"name\":\"trigger-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:43Z", - "generation": 1, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-websocket\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_DEBUG_SIGNER\"}": { - ".": {}, - "f:name": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_VULN_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:14Z" - } - ], - "name": "ca-websocket", - "namespace": "cyberarmor-system", - "resourceVersion": "60787065", - "uid": "914f30e9-d858-4945-9314-cbd3422ebaab" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-websocket" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_VULN_SCAN_SCHEDULE", - "value": "@every 11h" - }, - { - "name": "CA_POSTURE_SCAN_SCHEDULE", - "value": "@every 12h" - }, - { - "name": "CA_DEBUG_SIGNER" - } - ], - "image": "quay.io/armosec/k8s-ca-websocket-ubi:406", - "imagePullPolicy": "Always", - "name": "ca-websocket", - "ports": [ - { - "containerPort": 4002, - "name": "trigger-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "1000Mi" - }, - "requests": { - "cpu": "300m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:14Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:43Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "ReplicaSet \"ca-websocket-857758846f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"adservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"adservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"adservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/adservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"name\":\"server\",\"ports\":[{\"containerPort\":9555}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"180Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:51Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":9555,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:12Z" - } - ], - "name": "adservice", - "namespace": "hipster", - "resourceVersion": "61263240", - "uid": "368bea36-82be-4c28-8607-cf931a836185" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "adservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6415784d-d96b-4866-9c10-d571c8d8fd35", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:29", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-adservice" - }, - "creationTimestamp": null, - "labels": { - "app": "adservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/adservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 9555, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "300Mi" - }, - "requests": { - "cpu": "200m", - "memory": "180Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:24Z", - "lastUpdateTime": "2021-10-12T00:12:24Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:51Z", - "lastUpdateTime": "2021-10-13T00:28:12Z", - "message": "ReplicaSet \"adservice-7864446d5c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"cartservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"cartservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"cartservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"REDIS_ADDR\",\"value\":\"redis-cart:6379\"}],\"image\":\"gcr.io/google-samples/microservices-demo/cartservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15,\"periodSeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":7070}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:47Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"REDIS_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7070,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T09:40:08Z" - } - ], - "name": "cartservice", - "namespace": "hipster", - "resourceVersion": "61443544", - "uid": "df767287-ffc1-4559-b7fd-32b09bf6208c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "cartservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "7ced7c5c-c483-40b3-b6bc-8829339dc3e1", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:04", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-cartservice" - }, - "creationTimestamp": null, - "labels": { - "app": "cartservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "REDIS_ADDR", - "value": "redis-cart:6379" - } - ], - "image": "gcr.io/google-samples/microservices-demo/cartservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7070, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "128Mi" - }, - "requests": { - "cpu": "200m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-13T00:27:35Z", - "message": "ReplicaSet \"cartservice-7c8f8f9ddd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T09:40:08Z", - "lastUpdateTime": "2021-10-13T09:40:08Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"checkoutservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"checkoutservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"checkoutservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"5050\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"PAYMENT_SERVICE_ADDR\",\"value\":\"paymentservice:50051\"},{\"name\":\"EMAIL_SERVICE_ADDR\",\"value\":\"emailservice:5000\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"}],\"image\":\"gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":5050}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:42Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EMAIL_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PAYMENT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":5050,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:42Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:41Z" - } - ], - "name": "checkoutservice", - "namespace": "hipster", - "resourceVersion": "61262985", - "uid": "b5e6a8d8-1ec6-4acc-bf14-e3bb28bff284" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "checkoutservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "bebad8bb-8728-4813-ae19-d22a38a289a5", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:28", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-checkoutservice" - }, - "creationTimestamp": null, - "labels": { - "app": "checkoutservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "5050" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "PAYMENT_SERVICE_ADDR", - "value": "paymentservice:50051" - }, - { - "name": "EMAIL_SERVICE_ADDR", - "value": "emailservice:5000" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - } - ], - "image": "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 5050, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T14:05:32Z", - "lastUpdateTime": "2021-10-12T14:05:32Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:42Z", - "lastUpdateTime": "2021-10-13T00:27:42Z", - "message": "ReplicaSet \"checkoutservice-86c564466c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"currencyservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"currencyservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"currencyservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"7000\"}],\"image\":\"gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":7000,\"name\":\"grpc\"}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T08:37:54Z" - } - ], - "name": "currencyservice", - "namespace": "hipster", - "resourceVersion": "61423238", - "uid": "167b75e1-1be2-4764-aaad-dbb1ae248d3c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "currencyservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "4aa34494-0348-4859-9e29-56df9baf52ba", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-currencyservice" - }, - "creationTimestamp": null, - "labels": { - "app": "currencyservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "7000" - } - ], - "image": "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7000, - "name": "grpc", - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:29:19Z", - "message": "ReplicaSet \"currencyservice-544b6d849c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T08:37:54Z", - "lastUpdateTime": "2021-10-13T08:37:54Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"emailservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"emailservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"emailservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"DISABLE_PROFILER\",\"value\":\"1\"}],\"image\":\"gcr.io/google-samples/microservices-demo/emailservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:41Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"DISABLE_PROFILER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:41Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:07Z" - } - ], - "name": "emailservice", - "namespace": "hipster", - "resourceVersion": "61263204", - "uid": "9959433f-c964-4e6d-a2d7-3d1b9b617948" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "emailservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "e8aa9826-2367-44e1-9aad-a6d617b0fa06", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:48", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-emailservice" - }, - "creationTimestamp": null, - "labels": { - "app": "emailservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "DISABLE_PROFILER", - "value": "1" - } - ], - "image": "gcr.io/google-samples/microservices-demo/emailservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-12T00:11:47Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:41Z", - "lastUpdateTime": "2021-10-13T00:28:08Z", - "message": "ReplicaSet \"emailservice-cc7c4cd87\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"frontend\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"frontend\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"frontend\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"},{\"name\":\"RECOMMENDATION_SERVICE_ADDR\",\"value\":\"recommendationservice:8080\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"CHECKOUT_SERVICE_ADDR\",\"value\":\"checkoutservice:5050\"},{\"name\":\"AD_SERVICE_ADDR\",\"value\":\"adservice:9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/frontend:v0.2.3\",\"livenessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-liveness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-readiness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:44Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AD_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CHECKOUT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"RECOMMENDATION_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:44Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:34Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:22Z" - } - ], - "name": "frontend", - "namespace": "hipster", - "resourceVersion": "61263336", - "uid": "86b92d9e-22ad-4f0a-be26-41343f05f0d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "frontend" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9611f05f-4a8b-48ff-9722-e6a2ec702d65", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:57", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-frontend", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "frontend", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - }, - { - "name": "RECOMMENDATION_SERVICE_ADDR", - "value": "recommendationservice:8080" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "CHECKOUT_SERVICE_ADDR", - "value": "checkoutservice:5050" - }, - { - "name": "AD_SERVICE_ADDR", - "value": "adservice:9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/frontend:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-liveness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-readiness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:04Z", - "lastUpdateTime": "2021-10-12T00:12:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:44Z", - "lastUpdateTime": "2021-10-13T00:28:23Z", - "message": "ReplicaSet \"frontend-c747f6f47\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"loadgenerator\",\"namespace\":\"hipster\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"loadgenerator\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"loadgenerator\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"FRONTEND_ADDR\",\"value\":\"frontend:80\"},{\"name\":\"USERS\",\"value\":\"10\"}],\"image\":\"gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3\",\"name\":\"main\",\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"256Mi\"}}}],\"restartPolicy\":\"Always\",\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"main\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"FRONTEND_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"USERS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:38Z" - } - ], - "name": "loadgenerator", - "namespace": "hipster", - "resourceVersion": "61263451", - "uid": "e9200650-d25d-43f2-b1bc-4615beaed50c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "loadgenerator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "baca3d0f-fdc8-42c6-a9b1-ee29b3d173e0", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:26", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-loadgenerator", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "loadgenerator", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "FRONTEND_ADDR", - "value": "frontend:80" - }, - { - "name": "USERS", - "value": "10" - } - ], - "image": "gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "name": "main", - "resources": { - "limits": { - "cpu": "500m", - "memory": "512Mi" - }, - "requests": { - "cpu": "300m", - "memory": "256Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-13T00:24:15Z", - "lastUpdateTime": "2021-10-13T00:24:15Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:28:38Z", - "message": "ReplicaSet \"loadgenerator-6dcb6ffc4f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"paymentservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"paymentservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"paymentservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:45Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:45Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:29:27Z" - } - ], - "name": "paymentservice", - "namespace": "hipster", - "resourceVersion": "61263785", - "uid": "ab21c30f-d153-4ea8-982e-e12a71745dae" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "paymentservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "60b5720d-99b5-47a0-8bc4-656b372a6d17", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:52", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-paymentservice" - }, - "creationTimestamp": null, - "labels": { - "app": "paymentservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:45Z", - "lastUpdateTime": "2021-10-13T00:29:27Z", - "message": "ReplicaSet \"paymentservice-849b876ffd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"productcatalogservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"productcatalogservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"productcatalogservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":3550}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:46Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":3550,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:57Z" - } - ], - "name": "productcatalogservice", - "namespace": "hipster", - "resourceVersion": "61263117", - "uid": "50b29b6e-0f97-43b8-9555-a53d9c0e18f9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "productcatalogservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9bb4cc06-3907-401b-919f-c2974a623068", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-productcatalogservice" - }, - "creationTimestamp": null, - "labels": { - "app": "productcatalogservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 3550, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:46Z", - "lastUpdateTime": "2021-10-13T00:27:57Z", - "message": "ReplicaSet \"productcatalogservice-586fd876d5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"recommendationservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"recommendationservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"recommendationservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"450Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"220Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:43Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:37Z" - } - ], - "name": "recommendationservice", - "namespace": "hipster", - "resourceVersion": "61263443", - "uid": "00437f28-24c4-4759-ab93-f0be948eabc9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "recommendationservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "8cace306-b3ce-4f2f-8a6f-b122873b4eee", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-recommendationservice" - }, - "creationTimestamp": null, - "labels": { - "app": "recommendationservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "450Mi" - }, - "requests": { - "cpu": "100m", - "memory": "220Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-12T00:11:50Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:43Z", - "lastUpdateTime": "2021-10-13T00:28:37Z", - "message": "ReplicaSet \"recommendationservice-54b7b7b95d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"redis-cart\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"redis-cart\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"redis-cart\"}},\"spec\":{\"containers\":[{\"image\":\"redis:alpine\",\"livenessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"name\":\"redis\",\"ports\":[{\"containerPort\":6379}],\"readinessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"resources\":{\"limits\":{\"cpu\":\"125m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"70m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/data\",\"name\":\"redis-data\"}]}],\"volumes\":[{\"emptyDir\":{},\"name\":\"redis-data\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:50Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"redis\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":6379,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/data\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"redis-data\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:38Z" - } - ], - "name": "redis-cart", - "namespace": "hipster", - "resourceVersion": "61262948", - "uid": "76b3aebb-9ec5-479e-81ae-975ccf1bc6ec" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "redis-cart" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "838a7c21-618b-4693-a13b-838a9231ca58", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-redis-cart" - }, - "creationTimestamp": null, - "labels": { - "app": "redis-cart", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "image": "redis:alpine", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "name": "redis", - "ports": [ - { - "containerPort": 6379, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "125m", - "memory": "256Mi" - }, - "requests": { - "cpu": "70m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/data", - "name": "redis-data" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "emptyDir": {}, - "name": "redis-data" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:57Z", - "lastUpdateTime": "2021-10-12T00:11:57Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-13T00:27:38Z", - "message": "ReplicaSet \"redis-cart-594778c8b9\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"shippingservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"shippingservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"shippingservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:49Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:49Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:11Z" - } - ], - "name": "shippingservice", - "namespace": "hipster", - "resourceVersion": "61262726", - "uid": "febd2fe5-0e28-448e-aabd-31904ebb82a9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "shippingservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6503b850-839c-4b73-95ab-195d27b3c10d", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:26:58", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-shippingservice" - }, - "creationTimestamp": null, - "labels": { - "app": "shippingservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:00Z", - "lastUpdateTime": "2021-10-12T00:12:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:49Z", - "lastUpdateTime": "2021-10-13T00:27:11Z", - "message": "ReplicaSet \"shippingservice-758c9b4d4b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":\"10%\",\"maxUnavailable\":0}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"kubedns\",\"prometheus.io/port\":\"10054\",\"prometheus.io/scrape\":\"true\",\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"labels\":{\"k8s-app\":\"kube-dns\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchExpressions\":[{\"key\":\"k8s-app\",\"operator\":\"In\",\"values\":[\"kube-dns\"]}]},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"--domain=cluster.local.\",\"--dns-port=10053\",\"--config-dir=/kube-dns-config\",\"--v=2\"],\"env\":[{\"name\":\"PROMETHEUS_PORT\",\"value\":\"10055\"}],\"image\":\"gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/kubedns\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"kubedns\",\"ports\":[{\"containerPort\":10053,\"name\":\"dns-local\",\"protocol\":\"UDP\"},{\"containerPort\":10053,\"name\":\"dns-tcp-local\",\"protocol\":\"TCP\"},{\"containerPort\":10055,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readiness\",\"port\":8081,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":3,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"memory\":\"210Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"70Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001},\"volumeMounts\":[{\"mountPath\":\"/kube-dns-config\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"-v=2\",\"-logtostderr\",\"-configDir=/etc/k8s/dns/dnsmasq-nanny\",\"-restartDnsmasq=true\",\"--\",\"-k\",\"--cache-size=1000\",\"--no-negcache\",\"--dns-forward-max=1500\",\"--log-facility=-\",\"--server=/cluster.local/127.0.0.1#10053\",\"--server=/in-addr.arpa/127.0.0.1#10053\",\"--server=/ip6.arpa/127.0.0.1#10053\"],\"image\":\"gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/dnsmasq\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"dnsmasq\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"150m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"capabilities\":{\"add\":[\"NET_BIND_SERVICE\",\"SETGID\"],\"drop\":[\"all\"]}},\"volumeMounts\":[{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"--v=2\",\"--logtostderr\",\"--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV\",\"--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV\"],\"image\":\"gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/metrics\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"sidecar\",\"ports\":[{\"containerPort\":10054,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001}}],\"dnsPolicy\":\"Default\",\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 4, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:scheduler.alpha.kubernetes.io/critical-pod": {}, - "f:seccomp.security.alpha.kubernetes.io/pod": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:podAntiAffinity": { - ".": {}, - "f:preferredDuringSchedulingIgnoredDuringExecution": {} - } - }, - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:capabilities": { - ".": {}, - "f:add": {}, - "f:drop": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"kubedns\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PROMETHEUS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10053,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10053,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10055,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/kube-dns-config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"sidecar\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10054,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - "f:image": {} - }, - "k:{\"name\":\"kubedns\"}": { - "f:image": {} - }, - "k:{\"name\":\"sidecar\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:06:26Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "53109905", - "uid": "cd5cca24-7cd2-4548-a5d3-d90beb79f9e8" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 2, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "10%", - "maxUnavailable": 0 - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "kubedns", - "prometheus.io/port": "10054", - "prometheus.io/scrape": "true", - "scheduler.alpha.kubernetes.io/critical-pod": "", - "seccomp.security.alpha.kubernetes.io/pod": "runtime/default" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns" - } - }, - "spec": { - "affinity": { - "podAntiAffinity": { - "preferredDuringSchedulingIgnoredDuringExecution": [ - { - "podAffinityTerm": { - "labelSelector": { - "matchExpressions": [ - { - "key": "k8s-app", - "operator": "In", - "values": [ - "kube-dns" - ] - } - ] - }, - "topologyKey": "kubernetes.io/hostname" - }, - "weight": 100 - } - ] - } - }, - "containers": [ - { - "args": [ - "--domain=cluster.local.", - "--dns-port=10053", - "--config-dir=/kube-dns-config", - "--v=2" - ], - "env": [ - { - "name": "PROMETHEUS_PORT", - "value": "10055" - } - ], - "image": "gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/kubedns", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "kubedns", - "ports": [ - { - "containerPort": 10053, - "name": "dns-local", - "protocol": "UDP" - }, - { - "containerPort": 10053, - "name": "dns-tcp-local", - "protocol": "TCP" - }, - { - "containerPort": 10055, - "name": "metrics", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/readiness", - "port": 8081, - "scheme": "HTTP" - }, - "initialDelaySeconds": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "resources": { - "limits": { - "memory": "210Mi" - }, - "requests": { - "cpu": "100m", - "memory": "70Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/kube-dns-config", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "-v=2", - "-logtostderr", - "-configDir=/etc/k8s/dns/dnsmasq-nanny", - "-restartDnsmasq=true", - "--", - "-k", - "--cache-size=1000", - "--no-negcache", - "--dns-forward-max=1500", - "--log-facility=-", - "--server=/cluster.local/127.0.0.1#10053", - "--server=/in-addr.arpa/127.0.0.1#10053", - "--server=/ip6.arpa/127.0.0.1#10053" - ], - "image": "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/dnsmasq", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "dnsmasq", - "ports": [ - { - "containerPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "150m", - "memory": "20Mi" - } - }, - "securityContext": { - "capabilities": { - "add": [ - "NET_BIND_SERVICE", - "SETGID" - ], - "drop": [ - "all" - ] - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/k8s/dns/dnsmasq-nanny", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "--v=2", - "--logtostderr", - "--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV", - "--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV" - ], - "image": "gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/metrics", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "sidecar", - "ports": [ - { - "containerPort": 10054, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns", - "serviceAccountName": "kube-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 2, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-09-11T01:57:38Z", - "message": "ReplicaSet \"kube-dns-59844ff879\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:06:26Z", - "lastUpdateTime": "2021-09-25T17:06:26Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 4, - "readyReplicas": 2, - "replicas": 2, - "updatedReplicas": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns-autoscaler\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns-autoscaler\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"spec\":{\"containers\":[{\"command\":[\"/cluster-proportional-autoscaler\",\"--namespace=kube-system\",\"--configmap=kube-dns-autoscaler\",\"--target=Deployment/kube-dns\",\"--default-params={\\\"linear\\\":{\\\"coresPerReplica\\\":256,\\\"nodesPerReplica\\\":16,\\\"preventSinglePointFailure\\\":true,\\\"includeUnschedulableNodes\\\":true}}\",\"--logtostderr=true\",\"--v=2\"],\"image\":\"gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0\",\"name\":\"autoscaler\",\"resources\":{\"requests\":{\"cpu\":\"20m\",\"memory\":\"10Mi\"}}}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"seccompProfile\":{\"type\":\"RuntimeDefault\"},\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns-autoscaler\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns-autoscaler", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"autoscaler\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:02:52Z" - } - ], - "name": "kube-dns-autoscaler", - "namespace": "kube-system", - "resourceVersion": "53108562", - "uid": "c84ce079-f3c8-46ba-871f-0f2d42ffee1e" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/cluster-proportional-autoscaler", - "--namespace=kube-system", - "--configmap=kube-dns-autoscaler", - "--target=Deployment/kube-dns", - "--default-params={\"linear\":{\"coresPerReplica\":256,\"nodesPerReplica\":16,\"preventSinglePointFailure\":true,\"includeUnschedulableNodes\":true}}", - "--logtostderr=true", - "--v=2" - ], - "image": "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "autoscaler", - "resources": { - "requests": { - "cpu": "20m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "seccompProfile": { - "type": "RuntimeDefault" - }, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns-autoscaler", - "serviceAccountName": "kube-dns-autoscaler", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:54:39Z", - "message": "ReplicaSet \"kube-dns-autoscaler-844c9d9448\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:02:52Z", - "lastUpdateTime": "2021-09-25T17:02:52Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"glbc\",\"kubernetes.io/cluster-service\":\"true\",\"kubernetes.io/name\":\"GLBC\"},\"name\":\"l7-default-backend\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"glbc\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"glbc\",\"name\":\"glbc\"}},\"spec\":{\"containers\":[{\"image\":\"k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":30,\"timeoutSeconds\":5},\"name\":\"default-http-backend\",\"ports\":[{\"containerPort\":8080}],\"resources\":{\"limits\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}}}],\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"tolerations\":[{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "glbc", - "kubernetes.io/cluster-service": "true", - "kubernetes.io/name": "GLBC" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:kubernetes.io/name": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:name": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"default-http-backend\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:seccompProfile": { - "f:type": {} - } - }, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:01:20Z" - } - ], - "name": "l7-default-backend", - "namespace": "kube-system", - "resourceVersion": "53107969", - "uid": "32a76c03-37a1-44e9-b293-dd6b46ed274b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "glbc" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "glbc", - "name": "glbc" - } - }, - "spec": { - "containers": [ - { - "image": "k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 30, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "default-http-backend", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "10m", - "memory": "20Mi" - }, - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:56:25Z", - "message": "ReplicaSet \"l7-default-backend-56cb9644f6\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:01:20Z", - "lastUpdateTime": "2021-09-25T17:01:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "24", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metrics-server\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server-v0.3.6\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server\"},\"spec\":{\"containers\":[{\"command\":[\"/metrics-server\",\"--metric-resolution=30s\",\"--kubelet-port=10255\",\"--deprecated-kubelet-completely-insecure=true\",\"--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP\"],\"image\":\"k8s.gcr.io/metrics-server-amd64:v0.3.6\",\"name\":\"metrics-server\",\"ports\":[{\"containerPort\":443,\"name\":\"https\",\"protocol\":\"TCP\"}]},{\"command\":[\"/pod_nanny\",\"--config-dir=/etc/config\",\"--cpu=40m\",\"--extra-cpu=0.5m\",\"--memory=35Mi\",\"--extra-memory=4Mi\",\"--threshold=5\",\"--deployment=metrics-server-v0.3.6\",\"--container=metrics-server\",\"--poll-period=300000\",\"--estimator=exponential\",\"--scale-down-delay=24h\",\"--minClusterSize=5\",\"--use-metrics=true\"],\"env\":[{\"name\":\"MY_POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"MY_POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"gke.gcr.io/addon-resizer:1.8.11-gke.0\",\"name\":\"metrics-server-nanny\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"5m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"metrics-server-config-volume\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"metrics-server\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"metrics-server-config\"},\"name\":\"metrics-server-config-volume\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 24, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metrics-server", - "kubernetes.io/cluster-service": "true", - "version": "v0.3.6" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:version": {} - }, - "f:name": {} - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - }, - "k:{\"name\":\"metrics-server-nanny\"}": { - ".": {}, - "f:command": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"MY_POD_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"MY_POD_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"metrics-server-config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - "f:resources": { - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - } - } - } - } - } - } - }, - "manager": "pod_nanny", - "operation": "Update", - "time": "2021-06-13T13:42:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-26T17:13:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-26T17:13:52Z" - } - ], - "name": "metrics-server-v0.3.6", - "namespace": "kube-system", - "resourceVersion": "53582788", - "uid": "872d0f34-7998-45d3-9eea-570e0a47e03c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - }, - "name": "metrics-server" - }, - "spec": { - "containers": [ - { - "command": [ - "/metrics-server", - "--metric-resolution=30s", - "--kubelet-port=10255", - "--deprecated-kubelet-completely-insecure=true", - "--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP" - ], - "image": "k8s.gcr.io/metrics-server-amd64:v0.3.6", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server", - "ports": [ - { - "containerPort": 443, - "name": "https", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "44m", - "memory": "63Mi" - }, - "requests": { - "cpu": "44m", - "memory": "63Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - }, - { - "command": [ - "/pod_nanny", - "--config-dir=/etc/config", - "--cpu=40m", - "--extra-cpu=0.5m", - "--memory=35Mi", - "--extra-memory=4Mi", - "--threshold=5", - "--deployment=metrics-server-v0.3.6", - "--container=metrics-server", - "--poll-period=300000", - "--estimator=exponential", - "--scale-down-delay=24h", - "--minClusterSize=5", - "--use-metrics=true" - ], - "env": [ - { - "name": "MY_POD_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.name" - } - } - }, - { - "name": "MY_POD_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - } - ], - "image": "gke.gcr.io/addon-resizer:1.8.11-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server-nanny", - "resources": { - "limits": { - "cpu": "100m", - "memory": "300Mi" - }, - "requests": { - "cpu": "5m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "metrics-server-config-volume" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "serviceAccount": "metrics-server", - "serviceAccountName": "metrics-server", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "metrics-server-config" - }, - "name": "metrics-server-config-volume" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-09-25T17:12:33Z", - "lastUpdateTime": "2021-09-25T17:12:33Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-06-13T13:42:20Z", - "lastUpdateTime": "2021-09-26T17:13:52Z", - "message": "ReplicaSet \"metrics-server-v0.3.6-7889654bbb\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 24, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "6", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-proxy\"},\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-proxy\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-proxy\"}},\"spec\":{\"containers\":[{\"command\":[\"/bin/sh\",\"-c\",\"kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\\u003e\\u003e/var/log/kube-proxy.log 2\\u003e\\u00261\"],\"env\":[{\"name\":\"KUBERNETES_SERVICE_HOST\",\"value\":\"34.78.97.243\"}],\"image\":\"gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001\",\"name\":\"kube-proxy\",\"resources\":{\"requests\":{\"cpu\":\"100m\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/log\",\"name\":\"varlog\",\"readOnly\":false},{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/lib/modules\",\"name\":\"lib-modules\",\"readOnly\":true}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\",\"node.kubernetes.io/kube-proxy-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"kube-proxy\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/log\"},\"name\":\"varlog\"},{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"hostPath\":{\"path\":\"/lib/modules\"},\"name\":\"lib-modules\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "generation": 6, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-proxy" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBERNETES_SERVICE_HOST\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/kube-proxy-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - "f:command": {}, - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:44Z" - } - ], - "name": "kube-proxy", - "namespace": "kube-system", - "resourceVersion": "52161714", - "uid": "bb6f9ab0-e586-407b-95c0-773637c696e8" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-proxy" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-proxy" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "env": [ - { - "name": "KUBERNETES_SERVICE_HOST", - "value": "34.78.97.243" - } - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux", - "node.kubernetes.io/kube-proxy-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "kube-proxy", - "serviceAccountName": "kube-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 6 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"},\"name\":\"metadata-proxy-v0.1\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metadata-proxy\",\"version\":\"v0.1\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"}},\"spec\":{\"containers\":[{\"args\":[\"--addr=0.0.0.0:988\"],\"image\":\"k8s.gcr.io/metadata-proxy:v0.1.12\",\"name\":\"metadata-proxy\",\"resources\":{\"limits\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"},\"requests\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"}},\"securityContext\":{\"privileged\":true}}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"cloud.google.com/metadata-proxy-ready\":\"true\",\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"metadata-proxy\",\"terminationGracePeriodSeconds\":30,\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 3, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:cloud.google.com/metadata-proxy-ready": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - "f:args": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - } - ], - "name": "metadata-proxy-v0.1", - "namespace": "kube-system", - "resourceVersion": "25934435", - "uid": "94bf5845-f77b-47d4-bcec-e78549b4d8a3" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metadata-proxy", - "version": "v0.1" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--addr=0.0.0.0:988" - ], - "image": "k8s.gcr.io/metadata-proxy:v0.1.12", - "imagePullPolicy": "IfNotPresent", - "name": "metadata-proxy", - "resources": { - "limits": { - "cpu": "30m", - "memory": "25Mi" - }, - "requests": { - "cpu": "30m", - "memory": "25Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "cloud.google.com/metadata-proxy-ready": "true", - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "metadata-proxy", - "serviceAccountName": "metadata-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 3 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"node-local-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"node-local-dns\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"nodelocaldns\",\"components.gke.io/component-version\":\"1.4.0\",\"prometheus.io/port\":\"9253\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"k8s-app\":\"node-local-dns\"}},\"spec\":{\"containers\":[{\"args\":[\"-localip\",\"169.254.20.10,10.72.0.10\",\"-conf\",\"/etc/Corefile\",\"-upstreamsvc\",\"kube-dns-upstream\",\"-kubednscm\",\"/etc/kube-dns\"],\"image\":\"gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1\",\"livenessProbe\":{\"httpGet\":{\"host\":\"169.254.20.10\",\"path\":\"/health\",\"port\":8080},\"initialDelaySeconds\":60,\"timeoutSeconds\":5},\"name\":\"node-cache\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"},{\"containerPort\":9253,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"25m\",\"memory\":\"5Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/etc/coredns\",\"name\":\"config-volume\"},{\"mountPath\":\"/etc/kube-dns\",\"name\":\"kube-dns-config\"}]}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"addon.gke.io/node-local-dns-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"node-local-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"},{\"configMap\":{\"items\":[{\"key\":\"Corefile\",\"path\":\"Corefile.base\"}],\"name\":\"node-local-dns\"},\"name\":\"config-volume\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"}}}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "node-local-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:host": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":9253,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/coredns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/kube-dns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:addon.gke.io/node-local-dns-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "53114241", - "uid": "5069e9ba-0784-41bf-9577-3757bcb3b6d6" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "node-local-dns" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "nodelocaldns", - "components.gke.io/component-version": "1.4.0", - "prometheus.io/port": "9253", - "prometheus.io/scrape": "true" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "node-local-dns" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-localip", - "169.254.20.10,10.72.0.10", - "-conf", - "/etc/Corefile", - "-upstreamsvc", - "kube-dns-upstream", - "-kubednscm", - "/etc/kube-dns" - ], - "image": "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "host": "169.254.20.10", - "path": "/health", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "node-cache", - "ports": [ - { - "containerPort": 53, - "hostPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "hostPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - }, - { - "containerPort": 9253, - "hostPort": 9253, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "25m", - "memory": "5Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/etc/coredns", - "name": "config-volume" - }, - { - "mountPath": "/etc/kube-dns", - "name": "kube-dns-config" - } - ] - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "addon.gke.io/node-local-dns-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "node-local-dns", - "serviceAccountName": "node-local-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "Corefile", - "path": "Corefile.base" - } - ], - "name": "node-local-dns" - }, - "name": "config-volume" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 2, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"nvidia-gpu-device-plugin\"},\"name\":\"nvidia-gpu-device-plugin\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"cloud.google.com/gke-accelerator\",\"operator\":\"Exists\"}]}]}}},\"containers\":[{\"command\":[\"/usr/bin/nvidia-gpu-device-plugin\",\"-logtostderr\",\"--enable-container-gpu-metrics\",\"--enable-health-monitoring\"],\"env\":[{\"name\":\"LD_LIBRARY_PATH\",\"value\":\"/usr/local/nvidia/lib64\"}],\"image\":\"gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317\",\"name\":\"nvidia-gpu-device-plugin\",\"ports\":[{\"containerPort\":2112,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/device-plugin\",\"name\":\"device-plugin\"},{\"mountPath\":\"/dev\",\"name\":\"dev\"},{\"mountPath\":\"/usr/local/nvidia\",\"name\":\"nvidia\"},{\"mountPath\":\"/var/lib/kubelet/pod-resources\",\"name\":\"pod-resources\"},{\"mountPath\":\"/proc\",\"name\":\"proc\"},{\"mountPath\":\"/etc/nvidia\",\"name\":\"nvidia-config\"}]}],\"priorityClassName\":\"system-node-critical\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/device-plugins\"},\"name\":\"device-plugin\"},{\"hostPath\":{\"path\":\"/dev\"},\"name\":\"dev\"},{\"hostPath\":{\"path\":\"/home/kubernetes/bin/nvidia\",\"type\":\"Directory\"},\"name\":\"nvidia\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/pod-resources\"},\"name\":\"pod-resources\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"proc\"},{\"hostPath\":{\"path\":\"/etc/nvidia\"},\"name\":\"nvidia-config\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:17Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "nvidia-gpu-device-plugin" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:nodeAffinity": { - ".": {}, - "f:requiredDuringSchedulingIgnoredDuringExecution": { - ".": {}, - "f:nodeSelectorTerms": {} - } - } - }, - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"LD_LIBRARY_PATH\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":2112,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/device-plugin\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/local/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet/pod-resources\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"dev\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"device-plugin\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"nvidia\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"pod-resources\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - "f:command": {}, - "f:image": {}, - "f:volumeMounts": { - "k:{\"mountPath\":\"/etc/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/proc\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:volumes": { - "k:{\"name\":\"nvidia-config\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"proc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "nvidia-gpu-device-plugin", - "namespace": "kube-system", - "resourceVersion": "25934477", - "uid": "14396a20-ecee-4671-aefe-2a5b9d2e0dde" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "spec": { - "affinity": { - "nodeAffinity": { - "requiredDuringSchedulingIgnoredDuringExecution": { - "nodeSelectorTerms": [ - { - "matchExpressions": [ - { - "key": "cloud.google.com/gke-accelerator", - "operator": "Exists" - } - ] - } - ] - } - } - }, - "containers": [ - { - "command": [ - "/usr/bin/nvidia-gpu-device-plugin", - "-logtostderr", - "--enable-container-gpu-metrics", - "--enable-health-monitoring" - ], - "env": [ - { - "name": "LD_LIBRARY_PATH", - "value": "/usr/local/nvidia/lib64" - } - ], - "image": "gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317", - "imagePullPolicy": "IfNotPresent", - "name": "nvidia-gpu-device-plugin", - "ports": [ - { - "containerPort": 2112, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "20Mi" - }, - "requests": { - "cpu": "50m", - "memory": "20Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/device-plugin", - "name": "device-plugin" - }, - { - "mountPath": "/dev", - "name": "dev" - }, - { - "mountPath": "/usr/local/nvidia", - "name": "nvidia" - }, - { - "mountPath": "/var/lib/kubelet/pod-resources", - "name": "pod-resources" - }, - { - "mountPath": "/proc", - "name": "proc" - }, - { - "mountPath": "/etc/nvidia", - "name": "nvidia-config" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/device-plugins", - "type": "" - }, - "name": "device-plugin" - }, - { - "hostPath": { - "path": "/dev", - "type": "" - }, - "name": "dev" - }, - { - "hostPath": { - "path": "/home/kubernetes/bin/nvidia", - "type": "Directory" - }, - "name": "nvidia" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/pod-resources", - "type": "" - }, - "name": "pod-resources" - }, - { - "hostPath": { - "path": "/proc", - "type": "" - }, - "name": "proc" - }, - { - "hostPath": { - "path": "/etc/nvidia", - "type": "" - }, - "name": "nvidia-config" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:02:45.009201226Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:02:48Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"6de798cc-d558-479a-8ef4-38363e434633\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.63\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:02:55Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-5naq", - "uid": "6de798cc-d558-479a-8ef4-38363e434633" - } - ], - "resourceVersion": "53108585", - "uid": "fdd66d80-d09d-4b43-a291-b3797c7a5864" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-5naq", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://50767376b8a42b7a390e84c5c451d1485b1a562873b915100dc605bbcc49c1c5", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:02:48Z" - } - } - } - ], - "hostIP": "10.132.0.63", - "phase": "Running", - "podIP": "10.132.0.63", - "podIPs": [ - { - "ip": "10.132.0.63" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:02:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:09:05.595580038Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:09:09Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"d288c56c-2a00-42fe-b2ea-b8761fec2a4e\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.193\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:09:16Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-abj3", - "uid": "d288c56c-2a00-42fe-b2ea-b8761fec2a4e" - } - ], - "resourceVersion": "53110982", - "uid": "0866b060-d7a6-40bc-9ed9-292fbce958e9" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-abj3", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b04121a3de085254493b48dbe1be551abd021877d1c098afbd19e6429df8f4ba", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:09:08Z" - } - } - } - ], - "hostIP": "10.132.15.193", - "phase": "Running", - "podIP": "10.132.15.193", - "podIPs": [ - { - "ip": "10.132.15.193" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:09:06Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:56:27.195784979Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:56:29Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"9aa58d78-0147-4564-9900-0409a6bec341\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.61\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:56:37Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-enr8", - "uid": "9aa58d78-0147-4564-9900-0409a6bec341" - } - ], - "resourceVersion": "53106105", - "uid": "b940e7b5-9e7f-4ac7-a3ee-6c6655c1e65a" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-enr8", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b9375aed4bc463ecfa5fcfb0cfb3b55d087416bfe0c3267c1395e8f93569d03c", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:56:29Z" - } - } - } - ], - "hostIP": "10.132.0.61", - "phase": "Running", - "podIP": "10.132.0.61", - "podIPs": [ - { - "ip": "10.132.0.61" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:56:28Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:59:41.285621877Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:59:44Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"c1ab3c15-9764-40f5-ba6b-82556dc98ea2\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.62\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:59:52Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-oq2w", - "uid": "c1ab3c15-9764-40f5-ba6b-82556dc98ea2" - } - ], - "resourceVersion": "53107378", - "uid": "19e52dea-6339-4ed7-8e32-3d39b242d133" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-oq2w", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://a0b27bef16953a38c48075124547583280bccf28d1d6cf54c3b3e754e2847c86", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:59:44Z" - } - } - } - ], - "hostIP": "10.132.0.62", - "phase": "Running", - "podIP": "10.132.0.62", - "podIPs": [ - { - "ip": "10.132.0.62" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:59:42Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:12:12.095932889Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:12:15Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"7042c0e8-8dc5-4d1d-8b36-92c692c31c76\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.194\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:12:22Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-rgdp", - "uid": "7042c0e8-8dc5-4d1d-8b36-92c692c31c76" - } - ], - "resourceVersion": "53112149", - "uid": "5248c280-7bde-4fe9-a74e-56ae25abb0d2" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-rgdp", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://fd91ae480585a78c59ef401dc852d58921e76693ecbd908d98e4b63da6c298ff", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:12:14Z" - } - } - } - ], - "hostIP": "10.132.15.194", - "phase": "Running", - "podIP": "10.132.15.194", - "podIPs": [ - { - "ip": "10.132.15.194" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:12:13Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:05:45.558688986Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:05:49Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"a58f61e7-9d9e-4266-90d4-16b9969cb373\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.192\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:05:56Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-x940", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-x940", - "uid": "a58f61e7-9d9e-4266-90d4-16b9969cb373" - } - ], - "resourceVersion": "53109692", - "uid": "71a05734-f741-4b7e-82fe-765c555b3607" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-x940", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://6abab671623159f7174321118f58600f8955267a139a72508e9a73631ef7920d", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:05:48Z" - } - } - } - ], - "hostIP": "10.132.15.192", - "phase": "Running", - "podIP": "10.132.15.192", - "podIPs": [ - { - "ip": "10.132.15.192" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:05:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:15:06.466708143Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:15:10Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"65f37105-dd71-428b-bf8b-0e82b88027f1\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.195\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:15:17Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-zzyg", - "uid": "65f37105-dd71-428b-bf8b-0e82b88027f1" - } - ], - "resourceVersion": "53113200", - "uid": "dac23622-ae54-4a1a-a6ca-3c020911966e" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-zzyg", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://ee309dad5cb7047fcbd7eb0401760ccb4bd986080ab11c860911e37b132a2a5c", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:15:09Z" - } - } - } - ], - "hostIP": "10.132.15.195", - "phase": "Running", - "podIP": "10.132.15.195", - "podIPs": [ - { - "ip": "10.132.15.195" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:15:07Z" - } - } - ], - "listInputKinds": null - } - ], - "remediation": "You can use AppArmor, Seccomp, SELinux and Linux Capabilities mechanisms to restrict containers abilities to utilize unwanted privileges.", - "description": "Containers may be given more privileges than they actually need. This can increase the potential impact of a container compromise.", - "score": 7 - }, - { - "guid": "", - "attributes": { - "armoBuiltin": true - }, - "id": "C-0030", - "controlID": "C-0030", - "name": "Ingress and Egress blocked", - "ruleReports": [ - { - "name": "ingress-and-egress-blocked", - "remediation": "", - "ruleStatus": { - "status": "success", - "message": "" - }, - "ruleResponses": [ - { - "alertMessage": "Pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq does not have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:02:45.009201226Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:02:48Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"6de798cc-d558-479a-8ef4-38363e434633\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.63\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:02:55Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-5naq", - "uid": "6de798cc-d558-479a-8ef4-38363e434633" - } - ], - "resourceVersion": "53108585", - "uid": "fdd66d80-d09d-4b43-a291-b3797c7a5864" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-5naq", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://50767376b8a42b7a390e84c5c451d1485b1a562873b915100dc605bbcc49c1c5", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:02:48Z" - } - } - } - ], - "hostIP": "10.132.0.63", - "phase": "Running", - "podIP": "10.132.0.63", - "podIPs": [ - { - "ip": "10.132.0.63" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:02:46Z" - } - } - ] - } - }, - { - "alertMessage": "Pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3 does not have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:09:05.595580038Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:09:09Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"d288c56c-2a00-42fe-b2ea-b8761fec2a4e\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.193\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:09:16Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-abj3", - "uid": "d288c56c-2a00-42fe-b2ea-b8761fec2a4e" - } - ], - "resourceVersion": "53110982", - "uid": "0866b060-d7a6-40bc-9ed9-292fbce958e9" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-abj3", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b04121a3de085254493b48dbe1be551abd021877d1c098afbd19e6429df8f4ba", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:09:08Z" - } - } - } - ], - "hostIP": "10.132.15.193", - "phase": "Running", - "podIP": "10.132.15.193", - "podIPs": [ - { - "ip": "10.132.15.193" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:09:06Z" - } - } - ] - } - }, - { - "alertMessage": "Pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8 does not have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:56:27.195784979Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:56:29Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"9aa58d78-0147-4564-9900-0409a6bec341\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.61\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:56:37Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-enr8", - "uid": "9aa58d78-0147-4564-9900-0409a6bec341" - } - ], - "resourceVersion": "53106105", - "uid": "b940e7b5-9e7f-4ac7-a3ee-6c6655c1e65a" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-enr8", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b9375aed4bc463ecfa5fcfb0cfb3b55d087416bfe0c3267c1395e8f93569d03c", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:56:29Z" - } - } - } - ], - "hostIP": "10.132.0.61", - "phase": "Running", - "podIP": "10.132.0.61", - "podIPs": [ - { - "ip": "10.132.0.61" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:56:28Z" - } - } - ] - } - }, - { - "alertMessage": "Pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w does not have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:59:41.285621877Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:59:44Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"c1ab3c15-9764-40f5-ba6b-82556dc98ea2\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.62\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:59:52Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-oq2w", - "uid": "c1ab3c15-9764-40f5-ba6b-82556dc98ea2" - } - ], - "resourceVersion": "53107378", - "uid": "19e52dea-6339-4ed7-8e32-3d39b242d133" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-oq2w", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://a0b27bef16953a38c48075124547583280bccf28d1d6cf54c3b3e754e2847c86", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:59:44Z" - } - } - } - ], - "hostIP": "10.132.0.62", - "phase": "Running", - "podIP": "10.132.0.62", - "podIPs": [ - { - "ip": "10.132.0.62" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:59:42Z" - } - } - ] - } - }, - { - "alertMessage": "Pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp does not have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:12:12.095932889Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:12:15Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"7042c0e8-8dc5-4d1d-8b36-92c692c31c76\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.194\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:12:22Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-rgdp", - "uid": "7042c0e8-8dc5-4d1d-8b36-92c692c31c76" - } - ], - "resourceVersion": "53112149", - "uid": "5248c280-7bde-4fe9-a74e-56ae25abb0d2" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-rgdp", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://fd91ae480585a78c59ef401dc852d58921e76693ecbd908d98e4b63da6c298ff", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:12:14Z" - } - } - } - ], - "hostIP": "10.132.15.194", - "phase": "Running", - "podIP": "10.132.15.194", - "podIPs": [ - { - "ip": "10.132.15.194" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:12:13Z" - } - } - ] - } - }, - { - "alertMessage": "Pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-x940 does not have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:05:45.558688986Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:05:49Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"a58f61e7-9d9e-4266-90d4-16b9969cb373\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.192\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:05:56Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-x940", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-x940", - "uid": "a58f61e7-9d9e-4266-90d4-16b9969cb373" - } - ], - "resourceVersion": "53109692", - "uid": "71a05734-f741-4b7e-82fe-765c555b3607" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-x940", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://6abab671623159f7174321118f58600f8955267a139a72508e9a73631ef7920d", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:05:48Z" - } - } - } - ], - "hostIP": "10.132.15.192", - "phase": "Running", - "podIP": "10.132.15.192", - "podIPs": [ - { - "ip": "10.132.15.192" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:05:46Z" - } - } - ] - } - }, - { - "alertMessage": "Pod: kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg does not have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:15:06.466708143Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:15:10Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"65f37105-dd71-428b-bf8b-0e82b88027f1\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.195\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:15:17Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-zzyg", - "uid": "65f37105-dd71-428b-bf8b-0e82b88027f1" - } - ], - "resourceVersion": "53113200", - "uid": "dac23622-ae54-4a1a-a6ca-3c020911966e" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-zzyg", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://ee309dad5cb7047fcbd7eb0401760ccb4bd986080ab11c860911e37b132a2a5c", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:15:09Z" - } - } - } - ], - "hostIP": "10.132.15.195", - "phase": "Running", - "podIP": "10.132.15.195", - "podIPs": [ - { - "ip": "10.132.15.195" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:15:07Z" - } - } - ] - } - }, - { - "alertMessage": "Deployment: ca-audit has Pods which don't have ingress/egress defined", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-audit\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-audit\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CONFIG_FILES\",\"value\":\"/config/config.json\"},{\"name\":\"CA_SERVER_TYPE\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"cluster_kind\",\"name\":\"ca-audit\"}}}],\"image\":\"quay.io/armosec/k8s-ca-auditlog-ubi:21\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-audit\",\"ports\":[{\"containerPort\":443,\"name\":\"ca-audit-port\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/config\",\"name\":\"ca-audit\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-audit\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"config\",\"path\":\"config.json\"}],\"name\":\"ca-audit\"},\"name\":\"ca-audit\"},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:54Z", - "generation": 1, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CONFIG_FILES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_SERVER_TYPE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:54Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-audit", - "namespace": "cyberarmor-system", - "resourceVersion": "60787209", - "uid": "687f52ea-6956-4e8a-bb8c-7ea35a04b3f0" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-audit" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CONFIG_FILES", - "value": "/config/config.json" - }, - { - "name": "CA_SERVER_TYPE", - "valueFrom": { - "configMapKeyRef": { - "key": "cluster_kind", - "name": "ca-audit" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-auditlog-ubi:21", - "imagePullPolicy": "Always", - "name": "ca-audit", - "ports": [ - { - "containerPort": 443, - "name": "ca-audit-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/config", - "name": "ca-audit", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-audit", - "serviceAccountName": "ca-audit", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "config", - "path": "config.json" - } - ], - "name": "ca-audit" - }, - "name": "ca-audit" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:54Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-audit-c667df747\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - }, - "exception": { - "guid": "91fdc365-a73a-40e8-b032-809653d940b5", - "name": "exception_C-0030_cyberarmor-system_dd7b19496451509e9c61a2c2dd40b316", - "attributes": { - "namespaceOnly": "true" - }, - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-13T13:03:43.355585", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "namespace": "cyberarmor-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Ingress and Egress blocked", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "Deployment: ca-dashboard-aggregator has Pods which don't have ingress/egress defined", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-dashboard-aggregator\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-dashboard-aggregator\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-configtype=1\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-dashboard-aggregator\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"40Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:55Z", - "generation": 1, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-dashboard-aggregator\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:55Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T23:55:20Z" - } - ], - "name": "ca-dashboard-aggregator", - "namespace": "cyberarmor-system", - "resourceVersion": "61250607", - "uid": "0ba23569-e254-4388-b22f-30cc1eca031b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-dashboard-aggregator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-configtype=1", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173", - "imagePullPolicy": "Always", - "name": "ca-dashboard-aggregator", - "resources": { - "limits": { - "cpu": "200m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "40Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:18:55Z", - "lastUpdateTime": "2021-10-12T00:19:19Z", - "message": "ReplicaSet \"ca-dashboard-aggregator-5b8bdbc8f5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-12T23:55:20Z", - "lastUpdateTime": "2021-10-12T23:55:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - }, - "exception": { - "guid": "91fdc365-a73a-40e8-b032-809653d940b5", - "name": "exception_C-0030_cyberarmor-system_dd7b19496451509e9c61a2c2dd40b316", - "attributes": { - "namespaceOnly": "true" - }, - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-13T13:03:43.355585", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "namespace": "cyberarmor-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Ingress and Egress blocked", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "Deployment: ca-notification-server has Pods which don't have ingress/egress defined", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-notification-server\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-notification-server\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"maserNotificationServer\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\",\"value\":\"customerGUID\"},{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\",\"value\":\"8001\"},{\"name\":\"CA_NOTIFICATION_SERVER_PORT\",\"value\":\"8002\"}],\"image\":\"quay.io/armosec/notification-server-ubi:89\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-notification-server\",\"ports\":[{\"containerPort\":8001,\"name\":\"websocket\"},{\"containerPort\":8002,\"name\":\"rest-api\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:59Z", - "generation": 1, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-notification-server\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8001,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:59Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:11Z" - } - ], - "name": "ca-notification-server", - "namespace": "cyberarmor-system", - "resourceVersion": "60787036", - "uid": "8c3dc6fe-e730-4364-8445-dc5a05ad2b0f" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-notification-server" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_HOST", - "valueFrom": { - "configMapKeyRef": { - "key": "maserNotificationServer", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_ATTRIBUTES", - "value": "customerGUID" - }, - { - "name": "CA_NOTIFICATION_SERVER_WS_PORT", - "value": "8001" - }, - { - "name": "CA_NOTIFICATION_SERVER_PORT", - "value": "8002" - } - ], - "image": "quay.io/armosec/notification-server-ubi:89", - "imagePullPolicy": "Always", - "name": "ca-notification-server", - "ports": [ - { - "containerPort": 8001, - "name": "websocket", - "protocol": "TCP" - }, - { - "containerPort": 8002, - "name": "rest-api", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "50Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:11Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:59Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "ReplicaSet \"ca-notification-server-6fd966c875\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - }, - "exception": { - "guid": "91fdc365-a73a-40e8-b032-809653d940b5", - "name": "exception_C-0030_cyberarmor-system_dd7b19496451509e9c61a2c2dd40b316", - "attributes": { - "namespaceOnly": "true" - }, - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-13T13:03:43.355585", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "namespace": "cyberarmor-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Ingress and Egress blocked", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "Deployment: ca-ocimage has Pods which don't have ingress/egress defined", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-ocimage\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-ocimage\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-ocimage:63\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-ocimage\",\"ports\":[{\"containerPort\":8080,\"name\":\"ca-ocimage-port\"}],\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:51Z", - "generation": 1, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-ocimage\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:04Z" - } - ], - "name": "ca-ocimage", - "namespace": "cyberarmor-system", - "resourceVersion": "60786986", - "uid": "a6d37edf-b144-4677-91b3-73c73d9c7df6" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-ocimage" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-ocimage:63", - "imagePullPolicy": "Always", - "name": "ca-ocimage", - "ports": [ - { - "containerPort": 8080, - "name": "ca-ocimage-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "1", - "memory": "1000Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:04Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:51Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "ReplicaSet \"ca-ocimage-5576ff7d7d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - }, - "exception": { - "guid": "91fdc365-a73a-40e8-b032-809653d940b5", - "name": "exception_C-0030_cyberarmor-system_dd7b19496451509e9c61a2c2dd40b316", - "attributes": { - "namespaceOnly": "true" - }, - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-13T13:03:43.355585", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "namespace": "cyberarmor-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Ingress and Egress blocked", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "Deployment: ca-oracle has Pods which don't have ingress/egress defined", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-oracle\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-oracle\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_ORACLE_PORT\",\"value\":\"4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8002\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-oracle-ubi:11\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-oracle\",\"ports\":[{\"containerPort\":4000,\"name\":\"ca-oracle\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:19:01Z", - "generation": 1, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-oracle\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:19:01Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-oracle", - "namespace": "cyberarmor-system", - "resourceVersion": "60787203", - "uid": "da3dd21c-bf13-4d2a-97da-ca80b94d08d3" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-oracle" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_ORACLE_PORT", - "value": "4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8002" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-oracle-ubi:11", - "imagePullPolicy": "Always", - "name": "ca-oracle", - "ports": [ - { - "containerPort": 4000, - "name": "ca-oracle", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:19:01Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-oracle-6c98c6bdbf\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - }, - "exception": { - "guid": "91fdc365-a73a-40e8-b032-809653d940b5", - "name": "exception_C-0030_cyberarmor-system_dd7b19496451509e9c61a2c2dd40b316", - "attributes": { - "namespaceOnly": "true" - }, - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-13T13:03:43.355585", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "namespace": "cyberarmor-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Ingress and Egress blocked", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "Deployment: ca-posture has Pods which don't have ingress/egress defined", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-posture\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-posture\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8001\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-posture-ubi:112\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-posture\",\"ports\":[{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/resources/config\",\"name\":\"ca-posture-score-config\",\"readOnly\":false},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"},{\"configMap\":{\"items\":[{\"key\":\"resourcesdict.json\",\"path\":\"resourcesdict.json\"},{\"key\":\"frameworkdict.json\",\"path\":\"frameworkdict.json\"}],\"name\":\"ca-posture-score-config\"},\"name\":\"ca-posture-score-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:58Z", - "generation": 1, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-posture\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/resources/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-posture-score-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:58Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:45Z" - } - ], - "name": "ca-posture", - "namespace": "cyberarmor-system", - "resourceVersion": "60787259", - "uid": "f41f4dc1-cfb0-4201-bca7-f1cf0b72b6b7" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-posture" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8001" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-posture-ubi:112", - "imagePullPolicy": "Always", - "name": "ca-posture", - "ports": [ - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "500m", - "memory": "100Mi" - }, - "requests": { - "cpu": "100m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/resources/config", - "name": "ca-posture-score-config" - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "resourcesdict.json", - "path": "resourcesdict.json" - }, - { - "key": "frameworkdict.json", - "path": "frameworkdict.json" - } - ], - "name": "ca-posture-score-config" - }, - "name": "ca-posture-score-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:45Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:58Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "ReplicaSet \"ca-posture-5996968d7b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - }, - "exception": { - "guid": "91fdc365-a73a-40e8-b032-809653d940b5", - "name": "exception_C-0030_cyberarmor-system_dd7b19496451509e9c61a2c2dd40b316", - "attributes": { - "namespaceOnly": "true" - }, - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-13T13:03:43.355585", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "namespace": "cyberarmor-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Ingress and Egress blocked", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "Deployment: ca-rbac has Pods which don't have ingress/egress defined", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-rbac\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-rbac\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"S3_BUCKET\",\"value\":\"ca-kubernetes-rbac-db-dev\"},{\"name\":\"AWS_REGION\",\"value\":\"eu-west-1\"},{\"name\":\"AWS_ACCESS_KEY_ID\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keyid\",\"name\":\"ca-rbac\"}}},{\"name\":\"AWS_SECRET_ACCESS_KEY\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keysecret\",\"name\":\"ca-rbac\"}}}],\"image\":\"quay.io/armosec/k8s-ca-rbac-scanner-ubi:20\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-rbac\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"400Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:50Z", - "generation": 1, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-rbac\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AWS_ACCESS_KEY_ID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"AWS_REGION\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"AWS_SECRET_ACCESS_KEY\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"S3_BUCKET\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:13Z" - } - ], - "name": "ca-rbac", - "namespace": "cyberarmor-system", - "resourceVersion": "60787051", - "uid": "d5898a09-2489-4254-b210-0725ddb2427a" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-rbac" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "S3_BUCKET", - "value": "ca-kubernetes-rbac-db-dev" - }, - { - "name": "AWS_REGION", - "value": "eu-west-1" - }, - { - "name": "AWS_ACCESS_KEY_ID", - "valueFrom": { - "secretKeyRef": { - "key": "keyid", - "name": "ca-rbac" - } - } - }, - { - "name": "AWS_SECRET_ACCESS_KEY", - "valueFrom": { - "secretKeyRef": { - "key": "keysecret", - "name": "ca-rbac" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-rbac-scanner-ubi:20", - "imagePullPolicy": "Always", - "name": "ca-rbac", - "resources": { - "limits": { - "cpu": "200m", - "memory": "400Mi" - }, - "requests": { - "cpu": "10m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:13Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:50Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "ReplicaSet \"ca-rbac-75c8cfd6b4\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - }, - "exception": { - "guid": "91fdc365-a73a-40e8-b032-809653d940b5", - "name": "exception_C-0030_cyberarmor-system_dd7b19496451509e9c61a2c2dd40b316", - "attributes": { - "namespaceOnly": "true" - }, - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-13T13:03:43.355585", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "namespace": "cyberarmor-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Ingress and Egress blocked", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "Deployment: ca-vuln-scan has Pods which don't have ingress/egress defined", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-vuln-scan\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-vuln-scan\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"EVENT_RECEIVER_URL\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\",\"value\":\"4\"}],\"image\":\"quay.io/armosec/k8s-ca-vuln-scan-ubi:84\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-vuln-scan\",\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1.5Gi\"},\"requests\":{\"cpu\":\"500m\",\"memory\":\"1Gi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:47Z", - "generation": 1, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-vuln-scan\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EVENT_RECEIVER_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:00Z" - } - ], - "name": "ca-vuln-scan", - "namespace": "cyberarmor-system", - "resourceVersion": "60786938", - "uid": "9ea3d6cb-c6c0-423f-aab2-630827939285" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-vuln-scan" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "EVENT_RECEIVER_URL", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_MAX_VULN_SCAN_ROUTINS", - "value": "4" - } - ], - "image": "quay.io/armosec/k8s-ca-vuln-scan-ubi:84", - "imagePullPolicy": "Always", - "name": "ca-vuln-scan", - "resources": { - "limits": { - "cpu": "1", - "memory": "1536Mi" - }, - "requests": { - "cpu": "500m", - "memory": "1Gi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:00Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:47Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "ReplicaSet \"ca-vuln-scan-75b499df8c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - }, - "exception": { - "guid": "91fdc365-a73a-40e8-b032-809653d940b5", - "name": "exception_C-0030_cyberarmor-system_dd7b19496451509e9c61a2c2dd40b316", - "attributes": { - "namespaceOnly": "true" - }, - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-13T13:03:43.355585", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "namespace": "cyberarmor-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Ingress and Egress blocked", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "Deployment: ca-webhook has Pods which don't have ingress/egress defined", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-webhook\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-webhook\"}},\"template\":{\"metadata\":{\"annotations\":{\"certificate\":\"d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt\"},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-tlsCertFile=/etc/webhook/certs/tls.crt\",\"-tlsKeyFile=/etc/webhook/certs/tls.key\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_WEBHOOK_NAME\",\"value\":\"ca-webhook\"},{\"name\":\"CA_WEBHOOK_PORT\",\"value\":\"443\"},{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_LOGIN_SECRET_NAME\",\"value\":\"ca-login\"},{\"name\":\"CA_ORACLE_SERVER\",\"value\":\"http://ca-oracle:4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"http://ca-notification-server:8001\"},{\"name\":\"CA_OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-webhook-ubi:606\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-webhook\",\"ports\":[{\"containerPort\":443,\"name\":\"mutating-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"600Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"100Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/cazips\",\"name\":\"zip-download\"},{\"mountPath\":\"/etc/webhook/certs\",\"name\":\"ca-cluster-certificate\",\"readOnly\":true},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"emptyDir\":{},\"name\":\"zip-download\"},{\"name\":\"ca-cluster-certificate\",\"secret\":{\"secretName\":\"ca-cluster-certificate\"}},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:46Z", - "generation": 1, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:certificate": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-webhook\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_LOGIN_SECRET_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/cazips\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/webhook/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-cluster-certificate\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"zip-download\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:16Z" - } - ], - "name": "ca-webhook", - "namespace": "cyberarmor-system", - "resourceVersion": "60787072", - "uid": "c968fe90-8480-471f-bdf1-fa98447ce1d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-webhook" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "certificate": "d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt" - }, - "creationTimestamp": null, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-tlsCertFile=/etc/webhook/certs/tls.crt", - "-tlsKeyFile=/etc/webhook/certs/tls.key", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_WEBHOOK_NAME", - "value": "ca-webhook" - }, - { - "name": "CA_WEBHOOK_PORT", - "value": "443" - }, - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_LOGIN_SECRET_NAME", - "value": "ca-login" - }, - { - "name": "CA_ORACLE_SERVER", - "value": "http://ca-oracle:4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "http://ca-notification-server:8001" - }, - { - "name": "CA_OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-webhook-ubi:606", - "imagePullPolicy": "Always", - "name": "ca-webhook", - "ports": [ - { - "containerPort": 443, - "name": "mutating-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "600Mi" - }, - "requests": { - "cpu": "300m", - "memory": "100Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/cazips", - "name": "zip-download" - }, - { - "mountPath": "/etc/webhook/certs", - "name": "ca-cluster-certificate", - "readOnly": true - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "emptyDir": {}, - "name": "zip-download" - }, - { - "name": "ca-cluster-certificate", - "secret": { - "defaultMode": 420, - "secretName": "ca-cluster-certificate" - } - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:16Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:46Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "ReplicaSet \"ca-webhook-7dd8bbd798\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - }, - "exception": { - "guid": "91fdc365-a73a-40e8-b032-809653d940b5", - "name": "exception_C-0030_cyberarmor-system_dd7b19496451509e9c61a2c2dd40b316", - "attributes": { - "namespaceOnly": "true" - }, - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-13T13:03:43.355585", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "namespace": "cyberarmor-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Ingress and Egress blocked", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "Deployment: ca-websocket has Pods which don't have ingress/egress defined", - "ruleStatus": "warning", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-websocket\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-websocket\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_VULN_SCAN_SCHEDULE\",\"value\":\"@every 11h\"},{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\",\"value\":\"@every 12h\"},{\"name\":\"CA_DEBUG_SIGNER\",\"value\":null}],\"image\":\"quay.io/armosec/k8s-ca-websocket-ubi:406\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-websocket\",\"ports\":[{\"containerPort\":4002,\"name\":\"trigger-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:43Z", - "generation": 1, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-websocket\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_DEBUG_SIGNER\"}": { - ".": {}, - "f:name": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_VULN_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:14Z" - } - ], - "name": "ca-websocket", - "namespace": "cyberarmor-system", - "resourceVersion": "60787065", - "uid": "914f30e9-d858-4945-9314-cbd3422ebaab" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-websocket" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_VULN_SCAN_SCHEDULE", - "value": "@every 11h" - }, - { - "name": "CA_POSTURE_SCAN_SCHEDULE", - "value": "@every 12h" - }, - { - "name": "CA_DEBUG_SIGNER" - } - ], - "image": "quay.io/armosec/k8s-ca-websocket-ubi:406", - "imagePullPolicy": "Always", - "name": "ca-websocket", - "ports": [ - { - "containerPort": 4002, - "name": "trigger-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "1000Mi" - }, - "requests": { - "cpu": "300m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:14Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:43Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "ReplicaSet \"ca-websocket-857758846f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - }, - "exception": { - "guid": "91fdc365-a73a-40e8-b032-809653d940b5", - "name": "exception_C-0030_cyberarmor-system_dd7b19496451509e9c61a2c2dd40b316", - "attributes": { - "namespaceOnly": "true" - }, - "policyType": "postureExceptionPolicy", - "creationTime": "2021-10-13T13:03:43.355585", - "actions": [ - "alertOnly" - ], - "resources": [ - { - "designatorType": "Attributes", - "wlid": "", - "wildwlid": "", - "sid": "", - "attributes": { - "cluster": "gke_elated-pottery-310110_europe-west1-d_leonid-cluster", - "namespace": "cyberarmor-system" - } - } - ], - "posturePolicies": [ - { - "frameworkName": "NSA", - "controlName": "Ingress and Egress blocked", - "ruleName": "" - } - ] - } - }, - { - "alertMessage": "Deployment: adservice has Pods which don't have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"adservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"adservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"adservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/adservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"name\":\"server\",\"ports\":[{\"containerPort\":9555}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"180Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:51Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":9555,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:12Z" - } - ], - "name": "adservice", - "namespace": "hipster", - "resourceVersion": "61263240", - "uid": "368bea36-82be-4c28-8607-cf931a836185" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "adservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6415784d-d96b-4866-9c10-d571c8d8fd35", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:29", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-adservice" - }, - "creationTimestamp": null, - "labels": { - "app": "adservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/adservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 9555, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "300Mi" - }, - "requests": { - "cpu": "200m", - "memory": "180Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:24Z", - "lastUpdateTime": "2021-10-12T00:12:24Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:51Z", - "lastUpdateTime": "2021-10-13T00:28:12Z", - "message": "ReplicaSet \"adservice-7864446d5c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Deployment: cartservice has Pods which don't have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"cartservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"cartservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"cartservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"REDIS_ADDR\",\"value\":\"redis-cart:6379\"}],\"image\":\"gcr.io/google-samples/microservices-demo/cartservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15,\"periodSeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":7070}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:47Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"REDIS_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7070,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T09:40:08Z" - } - ], - "name": "cartservice", - "namespace": "hipster", - "resourceVersion": "61443544", - "uid": "df767287-ffc1-4559-b7fd-32b09bf6208c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "cartservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "7ced7c5c-c483-40b3-b6bc-8829339dc3e1", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:04", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-cartservice" - }, - "creationTimestamp": null, - "labels": { - "app": "cartservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "REDIS_ADDR", - "value": "redis-cart:6379" - } - ], - "image": "gcr.io/google-samples/microservices-demo/cartservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7070, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "128Mi" - }, - "requests": { - "cpu": "200m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-13T00:27:35Z", - "message": "ReplicaSet \"cartservice-7c8f8f9ddd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T09:40:08Z", - "lastUpdateTime": "2021-10-13T09:40:08Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Deployment: checkoutservice has Pods which don't have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"checkoutservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"checkoutservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"checkoutservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"5050\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"PAYMENT_SERVICE_ADDR\",\"value\":\"paymentservice:50051\"},{\"name\":\"EMAIL_SERVICE_ADDR\",\"value\":\"emailservice:5000\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"}],\"image\":\"gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":5050}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:42Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EMAIL_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PAYMENT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":5050,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:42Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:41Z" - } - ], - "name": "checkoutservice", - "namespace": "hipster", - "resourceVersion": "61262985", - "uid": "b5e6a8d8-1ec6-4acc-bf14-e3bb28bff284" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "checkoutservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "bebad8bb-8728-4813-ae19-d22a38a289a5", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:28", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-checkoutservice" - }, - "creationTimestamp": null, - "labels": { - "app": "checkoutservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "5050" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "PAYMENT_SERVICE_ADDR", - "value": "paymentservice:50051" - }, - { - "name": "EMAIL_SERVICE_ADDR", - "value": "emailservice:5000" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - } - ], - "image": "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 5050, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T14:05:32Z", - "lastUpdateTime": "2021-10-12T14:05:32Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:42Z", - "lastUpdateTime": "2021-10-13T00:27:42Z", - "message": "ReplicaSet \"checkoutservice-86c564466c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Deployment: currencyservice has Pods which don't have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"currencyservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"currencyservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"currencyservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"7000\"}],\"image\":\"gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":7000,\"name\":\"grpc\"}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T08:37:54Z" - } - ], - "name": "currencyservice", - "namespace": "hipster", - "resourceVersion": "61423238", - "uid": "167b75e1-1be2-4764-aaad-dbb1ae248d3c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "currencyservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "4aa34494-0348-4859-9e29-56df9baf52ba", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-currencyservice" - }, - "creationTimestamp": null, - "labels": { - "app": "currencyservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "7000" - } - ], - "image": "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7000, - "name": "grpc", - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:29:19Z", - "message": "ReplicaSet \"currencyservice-544b6d849c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T08:37:54Z", - "lastUpdateTime": "2021-10-13T08:37:54Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Deployment: emailservice has Pods which don't have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"emailservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"emailservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"emailservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"DISABLE_PROFILER\",\"value\":\"1\"}],\"image\":\"gcr.io/google-samples/microservices-demo/emailservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:41Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"DISABLE_PROFILER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:41Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:07Z" - } - ], - "name": "emailservice", - "namespace": "hipster", - "resourceVersion": "61263204", - "uid": "9959433f-c964-4e6d-a2d7-3d1b9b617948" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "emailservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "e8aa9826-2367-44e1-9aad-a6d617b0fa06", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:48", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-emailservice" - }, - "creationTimestamp": null, - "labels": { - "app": "emailservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "DISABLE_PROFILER", - "value": "1" - } - ], - "image": "gcr.io/google-samples/microservices-demo/emailservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-12T00:11:47Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:41Z", - "lastUpdateTime": "2021-10-13T00:28:08Z", - "message": "ReplicaSet \"emailservice-cc7c4cd87\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Deployment: frontend has Pods which don't have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"frontend\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"frontend\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"frontend\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"},{\"name\":\"RECOMMENDATION_SERVICE_ADDR\",\"value\":\"recommendationservice:8080\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"CHECKOUT_SERVICE_ADDR\",\"value\":\"checkoutservice:5050\"},{\"name\":\"AD_SERVICE_ADDR\",\"value\":\"adservice:9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/frontend:v0.2.3\",\"livenessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-liveness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-readiness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:44Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AD_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CHECKOUT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"RECOMMENDATION_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:44Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:34Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:22Z" - } - ], - "name": "frontend", - "namespace": "hipster", - "resourceVersion": "61263336", - "uid": "86b92d9e-22ad-4f0a-be26-41343f05f0d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "frontend" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9611f05f-4a8b-48ff-9722-e6a2ec702d65", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:57", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-frontend", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "frontend", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - }, - { - "name": "RECOMMENDATION_SERVICE_ADDR", - "value": "recommendationservice:8080" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "CHECKOUT_SERVICE_ADDR", - "value": "checkoutservice:5050" - }, - { - "name": "AD_SERVICE_ADDR", - "value": "adservice:9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/frontend:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-liveness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-readiness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:04Z", - "lastUpdateTime": "2021-10-12T00:12:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:44Z", - "lastUpdateTime": "2021-10-13T00:28:23Z", - "message": "ReplicaSet \"frontend-c747f6f47\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Deployment: loadgenerator has Pods which don't have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"loadgenerator\",\"namespace\":\"hipster\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"loadgenerator\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"loadgenerator\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"FRONTEND_ADDR\",\"value\":\"frontend:80\"},{\"name\":\"USERS\",\"value\":\"10\"}],\"image\":\"gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3\",\"name\":\"main\",\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"256Mi\"}}}],\"restartPolicy\":\"Always\",\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"main\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"FRONTEND_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"USERS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:38Z" - } - ], - "name": "loadgenerator", - "namespace": "hipster", - "resourceVersion": "61263451", - "uid": "e9200650-d25d-43f2-b1bc-4615beaed50c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "loadgenerator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "baca3d0f-fdc8-42c6-a9b1-ee29b3d173e0", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:26", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-loadgenerator", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "loadgenerator", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "FRONTEND_ADDR", - "value": "frontend:80" - }, - { - "name": "USERS", - "value": "10" - } - ], - "image": "gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "name": "main", - "resources": { - "limits": { - "cpu": "500m", - "memory": "512Mi" - }, - "requests": { - "cpu": "300m", - "memory": "256Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-13T00:24:15Z", - "lastUpdateTime": "2021-10-13T00:24:15Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:28:38Z", - "message": "ReplicaSet \"loadgenerator-6dcb6ffc4f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Deployment: paymentservice has Pods which don't have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"paymentservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"paymentservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"paymentservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:45Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:45Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:29:27Z" - } - ], - "name": "paymentservice", - "namespace": "hipster", - "resourceVersion": "61263785", - "uid": "ab21c30f-d153-4ea8-982e-e12a71745dae" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "paymentservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "60b5720d-99b5-47a0-8bc4-656b372a6d17", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:52", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-paymentservice" - }, - "creationTimestamp": null, - "labels": { - "app": "paymentservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:45Z", - "lastUpdateTime": "2021-10-13T00:29:27Z", - "message": "ReplicaSet \"paymentservice-849b876ffd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Deployment: productcatalogservice has Pods which don't have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"productcatalogservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"productcatalogservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"productcatalogservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":3550}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:46Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":3550,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:57Z" - } - ], - "name": "productcatalogservice", - "namespace": "hipster", - "resourceVersion": "61263117", - "uid": "50b29b6e-0f97-43b8-9555-a53d9c0e18f9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "productcatalogservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9bb4cc06-3907-401b-919f-c2974a623068", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-productcatalogservice" - }, - "creationTimestamp": null, - "labels": { - "app": "productcatalogservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 3550, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:46Z", - "lastUpdateTime": "2021-10-13T00:27:57Z", - "message": "ReplicaSet \"productcatalogservice-586fd876d5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Deployment: recommendationservice has Pods which don't have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"recommendationservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"recommendationservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"recommendationservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"450Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"220Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:43Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:37Z" - } - ], - "name": "recommendationservice", - "namespace": "hipster", - "resourceVersion": "61263443", - "uid": "00437f28-24c4-4759-ab93-f0be948eabc9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "recommendationservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "8cace306-b3ce-4f2f-8a6f-b122873b4eee", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-recommendationservice" - }, - "creationTimestamp": null, - "labels": { - "app": "recommendationservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "450Mi" - }, - "requests": { - "cpu": "100m", - "memory": "220Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-12T00:11:50Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:43Z", - "lastUpdateTime": "2021-10-13T00:28:37Z", - "message": "ReplicaSet \"recommendationservice-54b7b7b95d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Deployment: redis-cart has Pods which don't have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"redis-cart\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"redis-cart\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"redis-cart\"}},\"spec\":{\"containers\":[{\"image\":\"redis:alpine\",\"livenessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"name\":\"redis\",\"ports\":[{\"containerPort\":6379}],\"readinessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"resources\":{\"limits\":{\"cpu\":\"125m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"70m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/data\",\"name\":\"redis-data\"}]}],\"volumes\":[{\"emptyDir\":{},\"name\":\"redis-data\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:50Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"redis\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":6379,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/data\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"redis-data\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:38Z" - } - ], - "name": "redis-cart", - "namespace": "hipster", - "resourceVersion": "61262948", - "uid": "76b3aebb-9ec5-479e-81ae-975ccf1bc6ec" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "redis-cart" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "838a7c21-618b-4693-a13b-838a9231ca58", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-redis-cart" - }, - "creationTimestamp": null, - "labels": { - "app": "redis-cart", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "image": "redis:alpine", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "name": "redis", - "ports": [ - { - "containerPort": 6379, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "125m", - "memory": "256Mi" - }, - "requests": { - "cpu": "70m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/data", - "name": "redis-data" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "emptyDir": {}, - "name": "redis-data" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:57Z", - "lastUpdateTime": "2021-10-12T00:11:57Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-13T00:27:38Z", - "message": "ReplicaSet \"redis-cart-594778c8b9\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Deployment: shippingservice has Pods which don't have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"shippingservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"shippingservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"shippingservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:49Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:49Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:11Z" - } - ], - "name": "shippingservice", - "namespace": "hipster", - "resourceVersion": "61262726", - "uid": "febd2fe5-0e28-448e-aabd-31904ebb82a9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "shippingservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6503b850-839c-4b73-95ab-195d27b3c10d", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:26:58", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-shippingservice" - }, - "creationTimestamp": null, - "labels": { - "app": "shippingservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:00Z", - "lastUpdateTime": "2021-10-12T00:12:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:49Z", - "lastUpdateTime": "2021-10-13T00:27:11Z", - "message": "ReplicaSet \"shippingservice-758c9b4d4b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Deployment: kube-dns has Pods which don't have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":\"10%\",\"maxUnavailable\":0}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"kubedns\",\"prometheus.io/port\":\"10054\",\"prometheus.io/scrape\":\"true\",\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"labels\":{\"k8s-app\":\"kube-dns\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchExpressions\":[{\"key\":\"k8s-app\",\"operator\":\"In\",\"values\":[\"kube-dns\"]}]},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"--domain=cluster.local.\",\"--dns-port=10053\",\"--config-dir=/kube-dns-config\",\"--v=2\"],\"env\":[{\"name\":\"PROMETHEUS_PORT\",\"value\":\"10055\"}],\"image\":\"gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/kubedns\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"kubedns\",\"ports\":[{\"containerPort\":10053,\"name\":\"dns-local\",\"protocol\":\"UDP\"},{\"containerPort\":10053,\"name\":\"dns-tcp-local\",\"protocol\":\"TCP\"},{\"containerPort\":10055,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readiness\",\"port\":8081,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":3,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"memory\":\"210Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"70Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001},\"volumeMounts\":[{\"mountPath\":\"/kube-dns-config\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"-v=2\",\"-logtostderr\",\"-configDir=/etc/k8s/dns/dnsmasq-nanny\",\"-restartDnsmasq=true\",\"--\",\"-k\",\"--cache-size=1000\",\"--no-negcache\",\"--dns-forward-max=1500\",\"--log-facility=-\",\"--server=/cluster.local/127.0.0.1#10053\",\"--server=/in-addr.arpa/127.0.0.1#10053\",\"--server=/ip6.arpa/127.0.0.1#10053\"],\"image\":\"gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/dnsmasq\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"dnsmasq\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"150m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"capabilities\":{\"add\":[\"NET_BIND_SERVICE\",\"SETGID\"],\"drop\":[\"all\"]}},\"volumeMounts\":[{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"--v=2\",\"--logtostderr\",\"--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV\",\"--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV\"],\"image\":\"gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/metrics\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"sidecar\",\"ports\":[{\"containerPort\":10054,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001}}],\"dnsPolicy\":\"Default\",\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 4, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:scheduler.alpha.kubernetes.io/critical-pod": {}, - "f:seccomp.security.alpha.kubernetes.io/pod": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:podAntiAffinity": { - ".": {}, - "f:preferredDuringSchedulingIgnoredDuringExecution": {} - } - }, - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:capabilities": { - ".": {}, - "f:add": {}, - "f:drop": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"kubedns\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PROMETHEUS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10053,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10053,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10055,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/kube-dns-config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"sidecar\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10054,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - "f:image": {} - }, - "k:{\"name\":\"kubedns\"}": { - "f:image": {} - }, - "k:{\"name\":\"sidecar\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:06:26Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "53109905", - "uid": "cd5cca24-7cd2-4548-a5d3-d90beb79f9e8" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 2, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "10%", - "maxUnavailable": 0 - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "kubedns", - "prometheus.io/port": "10054", - "prometheus.io/scrape": "true", - "scheduler.alpha.kubernetes.io/critical-pod": "", - "seccomp.security.alpha.kubernetes.io/pod": "runtime/default" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns" - } - }, - "spec": { - "affinity": { - "podAntiAffinity": { - "preferredDuringSchedulingIgnoredDuringExecution": [ - { - "podAffinityTerm": { - "labelSelector": { - "matchExpressions": [ - { - "key": "k8s-app", - "operator": "In", - "values": [ - "kube-dns" - ] - } - ] - }, - "topologyKey": "kubernetes.io/hostname" - }, - "weight": 100 - } - ] - } - }, - "containers": [ - { - "args": [ - "--domain=cluster.local.", - "--dns-port=10053", - "--config-dir=/kube-dns-config", - "--v=2" - ], - "env": [ - { - "name": "PROMETHEUS_PORT", - "value": "10055" - } - ], - "image": "gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/kubedns", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "kubedns", - "ports": [ - { - "containerPort": 10053, - "name": "dns-local", - "protocol": "UDP" - }, - { - "containerPort": 10053, - "name": "dns-tcp-local", - "protocol": "TCP" - }, - { - "containerPort": 10055, - "name": "metrics", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/readiness", - "port": 8081, - "scheme": "HTTP" - }, - "initialDelaySeconds": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "resources": { - "limits": { - "memory": "210Mi" - }, - "requests": { - "cpu": "100m", - "memory": "70Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/kube-dns-config", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "-v=2", - "-logtostderr", - "-configDir=/etc/k8s/dns/dnsmasq-nanny", - "-restartDnsmasq=true", - "--", - "-k", - "--cache-size=1000", - "--no-negcache", - "--dns-forward-max=1500", - "--log-facility=-", - "--server=/cluster.local/127.0.0.1#10053", - "--server=/in-addr.arpa/127.0.0.1#10053", - "--server=/ip6.arpa/127.0.0.1#10053" - ], - "image": "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/dnsmasq", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "dnsmasq", - "ports": [ - { - "containerPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "150m", - "memory": "20Mi" - } - }, - "securityContext": { - "capabilities": { - "add": [ - "NET_BIND_SERVICE", - "SETGID" - ], - "drop": [ - "all" - ] - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/k8s/dns/dnsmasq-nanny", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "--v=2", - "--logtostderr", - "--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV", - "--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV" - ], - "image": "gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/metrics", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "sidecar", - "ports": [ - { - "containerPort": 10054, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns", - "serviceAccountName": "kube-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 2, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-09-11T01:57:38Z", - "message": "ReplicaSet \"kube-dns-59844ff879\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:06:26Z", - "lastUpdateTime": "2021-09-25T17:06:26Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 4, - "readyReplicas": 2, - "replicas": 2, - "updatedReplicas": 2 - } - } - ] - } - }, - { - "alertMessage": "Deployment: kube-dns-autoscaler has Pods which don't have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns-autoscaler\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns-autoscaler\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"spec\":{\"containers\":[{\"command\":[\"/cluster-proportional-autoscaler\",\"--namespace=kube-system\",\"--configmap=kube-dns-autoscaler\",\"--target=Deployment/kube-dns\",\"--default-params={\\\"linear\\\":{\\\"coresPerReplica\\\":256,\\\"nodesPerReplica\\\":16,\\\"preventSinglePointFailure\\\":true,\\\"includeUnschedulableNodes\\\":true}}\",\"--logtostderr=true\",\"--v=2\"],\"image\":\"gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0\",\"name\":\"autoscaler\",\"resources\":{\"requests\":{\"cpu\":\"20m\",\"memory\":\"10Mi\"}}}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"seccompProfile\":{\"type\":\"RuntimeDefault\"},\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns-autoscaler\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns-autoscaler", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"autoscaler\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:02:52Z" - } - ], - "name": "kube-dns-autoscaler", - "namespace": "kube-system", - "resourceVersion": "53108562", - "uid": "c84ce079-f3c8-46ba-871f-0f2d42ffee1e" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/cluster-proportional-autoscaler", - "--namespace=kube-system", - "--configmap=kube-dns-autoscaler", - "--target=Deployment/kube-dns", - "--default-params={\"linear\":{\"coresPerReplica\":256,\"nodesPerReplica\":16,\"preventSinglePointFailure\":true,\"includeUnschedulableNodes\":true}}", - "--logtostderr=true", - "--v=2" - ], - "image": "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "autoscaler", - "resources": { - "requests": { - "cpu": "20m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "seccompProfile": { - "type": "RuntimeDefault" - }, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns-autoscaler", - "serviceAccountName": "kube-dns-autoscaler", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:54:39Z", - "message": "ReplicaSet \"kube-dns-autoscaler-844c9d9448\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:02:52Z", - "lastUpdateTime": "2021-09-25T17:02:52Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Deployment: l7-default-backend has Pods which don't have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"glbc\",\"kubernetes.io/cluster-service\":\"true\",\"kubernetes.io/name\":\"GLBC\"},\"name\":\"l7-default-backend\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"glbc\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"glbc\",\"name\":\"glbc\"}},\"spec\":{\"containers\":[{\"image\":\"k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":30,\"timeoutSeconds\":5},\"name\":\"default-http-backend\",\"ports\":[{\"containerPort\":8080}],\"resources\":{\"limits\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}}}],\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"tolerations\":[{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "glbc", - "kubernetes.io/cluster-service": "true", - "kubernetes.io/name": "GLBC" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:kubernetes.io/name": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:name": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"default-http-backend\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:seccompProfile": { - "f:type": {} - } - }, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:01:20Z" - } - ], - "name": "l7-default-backend", - "namespace": "kube-system", - "resourceVersion": "53107969", - "uid": "32a76c03-37a1-44e9-b293-dd6b46ed274b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "glbc" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "glbc", - "name": "glbc" - } - }, - "spec": { - "containers": [ - { - "image": "k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 30, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "default-http-backend", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "10m", - "memory": "20Mi" - }, - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:56:25Z", - "message": "ReplicaSet \"l7-default-backend-56cb9644f6\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:01:20Z", - "lastUpdateTime": "2021-09-25T17:01:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "Deployment: metrics-server-v0.3.6 has Pods which don't have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "24", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metrics-server\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server-v0.3.6\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server\"},\"spec\":{\"containers\":[{\"command\":[\"/metrics-server\",\"--metric-resolution=30s\",\"--kubelet-port=10255\",\"--deprecated-kubelet-completely-insecure=true\",\"--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP\"],\"image\":\"k8s.gcr.io/metrics-server-amd64:v0.3.6\",\"name\":\"metrics-server\",\"ports\":[{\"containerPort\":443,\"name\":\"https\",\"protocol\":\"TCP\"}]},{\"command\":[\"/pod_nanny\",\"--config-dir=/etc/config\",\"--cpu=40m\",\"--extra-cpu=0.5m\",\"--memory=35Mi\",\"--extra-memory=4Mi\",\"--threshold=5\",\"--deployment=metrics-server-v0.3.6\",\"--container=metrics-server\",\"--poll-period=300000\",\"--estimator=exponential\",\"--scale-down-delay=24h\",\"--minClusterSize=5\",\"--use-metrics=true\"],\"env\":[{\"name\":\"MY_POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"MY_POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"gke.gcr.io/addon-resizer:1.8.11-gke.0\",\"name\":\"metrics-server-nanny\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"5m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"metrics-server-config-volume\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"metrics-server\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"metrics-server-config\"},\"name\":\"metrics-server-config-volume\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 24, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metrics-server", - "kubernetes.io/cluster-service": "true", - "version": "v0.3.6" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:version": {} - }, - "f:name": {} - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - }, - "k:{\"name\":\"metrics-server-nanny\"}": { - ".": {}, - "f:command": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"MY_POD_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"MY_POD_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"metrics-server-config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - "f:resources": { - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - } - } - } - } - } - } - }, - "manager": "pod_nanny", - "operation": "Update", - "time": "2021-06-13T13:42:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-26T17:13:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-26T17:13:52Z" - } - ], - "name": "metrics-server-v0.3.6", - "namespace": "kube-system", - "resourceVersion": "53582788", - "uid": "872d0f34-7998-45d3-9eea-570e0a47e03c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - }, - "name": "metrics-server" - }, - "spec": { - "containers": [ - { - "command": [ - "/metrics-server", - "--metric-resolution=30s", - "--kubelet-port=10255", - "--deprecated-kubelet-completely-insecure=true", - "--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP" - ], - "image": "k8s.gcr.io/metrics-server-amd64:v0.3.6", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server", - "ports": [ - { - "containerPort": 443, - "name": "https", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "44m", - "memory": "63Mi" - }, - "requests": { - "cpu": "44m", - "memory": "63Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - }, - { - "command": [ - "/pod_nanny", - "--config-dir=/etc/config", - "--cpu=40m", - "--extra-cpu=0.5m", - "--memory=35Mi", - "--extra-memory=4Mi", - "--threshold=5", - "--deployment=metrics-server-v0.3.6", - "--container=metrics-server", - "--poll-period=300000", - "--estimator=exponential", - "--scale-down-delay=24h", - "--minClusterSize=5", - "--use-metrics=true" - ], - "env": [ - { - "name": "MY_POD_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.name" - } - } - }, - { - "name": "MY_POD_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - } - ], - "image": "gke.gcr.io/addon-resizer:1.8.11-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server-nanny", - "resources": { - "limits": { - "cpu": "100m", - "memory": "300Mi" - }, - "requests": { - "cpu": "5m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "metrics-server-config-volume" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "serviceAccount": "metrics-server", - "serviceAccountName": "metrics-server", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "metrics-server-config" - }, - "name": "metrics-server-config-volume" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-09-25T17:12:33Z", - "lastUpdateTime": "2021-09-25T17:12:33Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-06-13T13:42:20Z", - "lastUpdateTime": "2021-09-26T17:13:52Z", - "message": "ReplicaSet \"metrics-server-v0.3.6-7889654bbb\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 24, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: kube-proxy has Pods which don't have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "6", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-proxy\"},\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-proxy\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-proxy\"}},\"spec\":{\"containers\":[{\"command\":[\"/bin/sh\",\"-c\",\"kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\\u003e\\u003e/var/log/kube-proxy.log 2\\u003e\\u00261\"],\"env\":[{\"name\":\"KUBERNETES_SERVICE_HOST\",\"value\":\"34.78.97.243\"}],\"image\":\"gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001\",\"name\":\"kube-proxy\",\"resources\":{\"requests\":{\"cpu\":\"100m\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/log\",\"name\":\"varlog\",\"readOnly\":false},{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/lib/modules\",\"name\":\"lib-modules\",\"readOnly\":true}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\",\"node.kubernetes.io/kube-proxy-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"kube-proxy\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/log\"},\"name\":\"varlog\"},{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"hostPath\":{\"path\":\"/lib/modules\"},\"name\":\"lib-modules\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "generation": 6, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-proxy" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBERNETES_SERVICE_HOST\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/kube-proxy-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - "f:command": {}, - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:44Z" - } - ], - "name": "kube-proxy", - "namespace": "kube-system", - "resourceVersion": "52161714", - "uid": "bb6f9ab0-e586-407b-95c0-773637c696e8" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-proxy" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-proxy" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "env": [ - { - "name": "KUBERNETES_SERVICE_HOST", - "value": "34.78.97.243" - } - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux", - "node.kubernetes.io/kube-proxy-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "kube-proxy", - "serviceAccountName": "kube-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 6 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: metadata-proxy-v0.1 has Pods which don't have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"},\"name\":\"metadata-proxy-v0.1\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metadata-proxy\",\"version\":\"v0.1\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"}},\"spec\":{\"containers\":[{\"args\":[\"--addr=0.0.0.0:988\"],\"image\":\"k8s.gcr.io/metadata-proxy:v0.1.12\",\"name\":\"metadata-proxy\",\"resources\":{\"limits\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"},\"requests\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"}},\"securityContext\":{\"privileged\":true}}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"cloud.google.com/metadata-proxy-ready\":\"true\",\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"metadata-proxy\",\"terminationGracePeriodSeconds\":30,\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 3, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:cloud.google.com/metadata-proxy-ready": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - "f:args": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - } - ], - "name": "metadata-proxy-v0.1", - "namespace": "kube-system", - "resourceVersion": "25934435", - "uid": "94bf5845-f77b-47d4-bcec-e78549b4d8a3" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metadata-proxy", - "version": "v0.1" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--addr=0.0.0.0:988" - ], - "image": "k8s.gcr.io/metadata-proxy:v0.1.12", - "imagePullPolicy": "IfNotPresent", - "name": "metadata-proxy", - "resources": { - "limits": { - "cpu": "30m", - "memory": "25Mi" - }, - "requests": { - "cpu": "30m", - "memory": "25Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "cloud.google.com/metadata-proxy-ready": "true", - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "metadata-proxy", - "serviceAccountName": "metadata-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 3 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: node-local-dns has Pods which don't have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"node-local-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"node-local-dns\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"nodelocaldns\",\"components.gke.io/component-version\":\"1.4.0\",\"prometheus.io/port\":\"9253\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"k8s-app\":\"node-local-dns\"}},\"spec\":{\"containers\":[{\"args\":[\"-localip\",\"169.254.20.10,10.72.0.10\",\"-conf\",\"/etc/Corefile\",\"-upstreamsvc\",\"kube-dns-upstream\",\"-kubednscm\",\"/etc/kube-dns\"],\"image\":\"gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1\",\"livenessProbe\":{\"httpGet\":{\"host\":\"169.254.20.10\",\"path\":\"/health\",\"port\":8080},\"initialDelaySeconds\":60,\"timeoutSeconds\":5},\"name\":\"node-cache\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"},{\"containerPort\":9253,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"25m\",\"memory\":\"5Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/etc/coredns\",\"name\":\"config-volume\"},{\"mountPath\":\"/etc/kube-dns\",\"name\":\"kube-dns-config\"}]}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"addon.gke.io/node-local-dns-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"node-local-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"},{\"configMap\":{\"items\":[{\"key\":\"Corefile\",\"path\":\"Corefile.base\"}],\"name\":\"node-local-dns\"},\"name\":\"config-volume\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"}}}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "node-local-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:host": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":9253,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/coredns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/kube-dns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:addon.gke.io/node-local-dns-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "53114241", - "uid": "5069e9ba-0784-41bf-9577-3757bcb3b6d6" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "node-local-dns" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "nodelocaldns", - "components.gke.io/component-version": "1.4.0", - "prometheus.io/port": "9253", - "prometheus.io/scrape": "true" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "node-local-dns" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-localip", - "169.254.20.10,10.72.0.10", - "-conf", - "/etc/Corefile", - "-upstreamsvc", - "kube-dns-upstream", - "-kubednscm", - "/etc/kube-dns" - ], - "image": "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "host": "169.254.20.10", - "path": "/health", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "node-cache", - "ports": [ - { - "containerPort": 53, - "hostPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "hostPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - }, - { - "containerPort": 9253, - "hostPort": 9253, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "25m", - "memory": "5Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/etc/coredns", - "name": "config-volume" - }, - { - "mountPath": "/etc/kube-dns", - "name": "kube-dns-config" - } - ] - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "addon.gke.io/node-local-dns-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "node-local-dns", - "serviceAccountName": "node-local-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "Corefile", - "path": "Corefile.base" - } - ], - "name": "node-local-dns" - }, - "name": "config-volume" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 2, - "updatedNumberScheduled": 7 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: nvidia-gpu-device-plugin has Pods which don't have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"nvidia-gpu-device-plugin\"},\"name\":\"nvidia-gpu-device-plugin\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"cloud.google.com/gke-accelerator\",\"operator\":\"Exists\"}]}]}}},\"containers\":[{\"command\":[\"/usr/bin/nvidia-gpu-device-plugin\",\"-logtostderr\",\"--enable-container-gpu-metrics\",\"--enable-health-monitoring\"],\"env\":[{\"name\":\"LD_LIBRARY_PATH\",\"value\":\"/usr/local/nvidia/lib64\"}],\"image\":\"gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317\",\"name\":\"nvidia-gpu-device-plugin\",\"ports\":[{\"containerPort\":2112,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/device-plugin\",\"name\":\"device-plugin\"},{\"mountPath\":\"/dev\",\"name\":\"dev\"},{\"mountPath\":\"/usr/local/nvidia\",\"name\":\"nvidia\"},{\"mountPath\":\"/var/lib/kubelet/pod-resources\",\"name\":\"pod-resources\"},{\"mountPath\":\"/proc\",\"name\":\"proc\"},{\"mountPath\":\"/etc/nvidia\",\"name\":\"nvidia-config\"}]}],\"priorityClassName\":\"system-node-critical\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/device-plugins\"},\"name\":\"device-plugin\"},{\"hostPath\":{\"path\":\"/dev\"},\"name\":\"dev\"},{\"hostPath\":{\"path\":\"/home/kubernetes/bin/nvidia\",\"type\":\"Directory\"},\"name\":\"nvidia\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/pod-resources\"},\"name\":\"pod-resources\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"proc\"},{\"hostPath\":{\"path\":\"/etc/nvidia\"},\"name\":\"nvidia-config\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:17Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "nvidia-gpu-device-plugin" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:nodeAffinity": { - ".": {}, - "f:requiredDuringSchedulingIgnoredDuringExecution": { - ".": {}, - "f:nodeSelectorTerms": {} - } - } - }, - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"LD_LIBRARY_PATH\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":2112,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/device-plugin\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/local/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet/pod-resources\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"dev\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"device-plugin\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"nvidia\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"pod-resources\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - "f:command": {}, - "f:image": {}, - "f:volumeMounts": { - "k:{\"mountPath\":\"/etc/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/proc\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:volumes": { - "k:{\"name\":\"nvidia-config\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"proc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "nvidia-gpu-device-plugin", - "namespace": "kube-system", - "resourceVersion": "25934477", - "uid": "14396a20-ecee-4671-aefe-2a5b9d2e0dde" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "spec": { - "affinity": { - "nodeAffinity": { - "requiredDuringSchedulingIgnoredDuringExecution": { - "nodeSelectorTerms": [ - { - "matchExpressions": [ - { - "key": "cloud.google.com/gke-accelerator", - "operator": "Exists" - } - ] - } - ] - } - } - }, - "containers": [ - { - "command": [ - "/usr/bin/nvidia-gpu-device-plugin", - "-logtostderr", - "--enable-container-gpu-metrics", - "--enable-health-monitoring" - ], - "env": [ - { - "name": "LD_LIBRARY_PATH", - "value": "/usr/local/nvidia/lib64" - } - ], - "image": "gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317", - "imagePullPolicy": "IfNotPresent", - "name": "nvidia-gpu-device-plugin", - "ports": [ - { - "containerPort": 2112, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "20Mi" - }, - "requests": { - "cpu": "50m", - "memory": "20Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/device-plugin", - "name": "device-plugin" - }, - { - "mountPath": "/dev", - "name": "dev" - }, - { - "mountPath": "/usr/local/nvidia", - "name": "nvidia" - }, - { - "mountPath": "/var/lib/kubelet/pod-resources", - "name": "pod-resources" - }, - { - "mountPath": "/proc", - "name": "proc" - }, - { - "mountPath": "/etc/nvidia", - "name": "nvidia-config" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/device-plugins", - "type": "" - }, - "name": "device-plugin" - }, - { - "hostPath": { - "path": "/dev", - "type": "" - }, - "name": "dev" - }, - { - "hostPath": { - "path": "/home/kubernetes/bin/nvidia", - "type": "Directory" - }, - "name": "nvidia" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/pod-resources", - "type": "" - }, - "name": "pod-resources" - }, - { - "hostPath": { - "path": "/proc", - "type": "" - }, - "name": "proc" - }, - { - "hostPath": { - "path": "/etc/nvidia", - "type": "" - }, - "name": "nvidia-config" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 2 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: pdcsi-node has Pods which don't have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - } - ] - } - }, - { - "alertMessage": "DaemonSet: pdcsi-node-windows has Pods which don't have ingress/egress defined", - "ruleStatus": "failed", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - } - ] - } - } - ], - "listInputResources": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-audit\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-audit\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CONFIG_FILES\",\"value\":\"/config/config.json\"},{\"name\":\"CA_SERVER_TYPE\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"cluster_kind\",\"name\":\"ca-audit\"}}}],\"image\":\"quay.io/armosec/k8s-ca-auditlog-ubi:21\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-audit\",\"ports\":[{\"containerPort\":443,\"name\":\"ca-audit-port\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/config\",\"name\":\"ca-audit\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-audit\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"config\",\"path\":\"config.json\"}],\"name\":\"ca-audit\"},\"name\":\"ca-audit\"},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:54Z", - "generation": 1, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CONFIG_FILES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_SERVER_TYPE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:54Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-audit", - "namespace": "cyberarmor-system", - "resourceVersion": "60787209", - "uid": "687f52ea-6956-4e8a-bb8c-7ea35a04b3f0" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-audit" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CONFIG_FILES", - "value": "/config/config.json" - }, - { - "name": "CA_SERVER_TYPE", - "valueFrom": { - "configMapKeyRef": { - "key": "cluster_kind", - "name": "ca-audit" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-auditlog-ubi:21", - "imagePullPolicy": "Always", - "name": "ca-audit", - "ports": [ - { - "containerPort": 443, - "name": "ca-audit-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/config", - "name": "ca-audit", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-audit", - "serviceAccountName": "ca-audit", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "config", - "path": "config.json" - } - ], - "name": "ca-audit" - }, - "name": "ca-audit" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:54Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-audit-c667df747\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-dashboard-aggregator\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-dashboard-aggregator\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-configtype=1\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-dashboard-aggregator\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"40Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:55Z", - "generation": 1, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-dashboard-aggregator\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:55Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T23:55:20Z" - } - ], - "name": "ca-dashboard-aggregator", - "namespace": "cyberarmor-system", - "resourceVersion": "61250607", - "uid": "0ba23569-e254-4388-b22f-30cc1eca031b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-dashboard-aggregator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-configtype=1", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173", - "imagePullPolicy": "Always", - "name": "ca-dashboard-aggregator", - "resources": { - "limits": { - "cpu": "200m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "40Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:18:55Z", - "lastUpdateTime": "2021-10-12T00:19:19Z", - "message": "ReplicaSet \"ca-dashboard-aggregator-5b8bdbc8f5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-12T23:55:20Z", - "lastUpdateTime": "2021-10-12T23:55:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-notification-server\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-notification-server\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"maserNotificationServer\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\",\"value\":\"customerGUID\"},{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\",\"value\":\"8001\"},{\"name\":\"CA_NOTIFICATION_SERVER_PORT\",\"value\":\"8002\"}],\"image\":\"quay.io/armosec/notification-server-ubi:89\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-notification-server\",\"ports\":[{\"containerPort\":8001,\"name\":\"websocket\"},{\"containerPort\":8002,\"name\":\"rest-api\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:59Z", - "generation": 1, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-notification-server\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8001,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:59Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:11Z" - } - ], - "name": "ca-notification-server", - "namespace": "cyberarmor-system", - "resourceVersion": "60787036", - "uid": "8c3dc6fe-e730-4364-8445-dc5a05ad2b0f" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-notification-server" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_HOST", - "valueFrom": { - "configMapKeyRef": { - "key": "maserNotificationServer", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_ATTRIBUTES", - "value": "customerGUID" - }, - { - "name": "CA_NOTIFICATION_SERVER_WS_PORT", - "value": "8001" - }, - { - "name": "CA_NOTIFICATION_SERVER_PORT", - "value": "8002" - } - ], - "image": "quay.io/armosec/notification-server-ubi:89", - "imagePullPolicy": "Always", - "name": "ca-notification-server", - "ports": [ - { - "containerPort": 8001, - "name": "websocket", - "protocol": "TCP" - }, - { - "containerPort": 8002, - "name": "rest-api", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "50Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:11Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:59Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "ReplicaSet \"ca-notification-server-6fd966c875\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-ocimage\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-ocimage\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-ocimage:63\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-ocimage\",\"ports\":[{\"containerPort\":8080,\"name\":\"ca-ocimage-port\"}],\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:51Z", - "generation": 1, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-ocimage\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:04Z" - } - ], - "name": "ca-ocimage", - "namespace": "cyberarmor-system", - "resourceVersion": "60786986", - "uid": "a6d37edf-b144-4677-91b3-73c73d9c7df6" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-ocimage" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-ocimage:63", - "imagePullPolicy": "Always", - "name": "ca-ocimage", - "ports": [ - { - "containerPort": 8080, - "name": "ca-ocimage-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "1", - "memory": "1000Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:04Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:51Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "ReplicaSet \"ca-ocimage-5576ff7d7d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-oracle\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-oracle\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_ORACLE_PORT\",\"value\":\"4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8002\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-oracle-ubi:11\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-oracle\",\"ports\":[{\"containerPort\":4000,\"name\":\"ca-oracle\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:19:01Z", - "generation": 1, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-oracle\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:19:01Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-oracle", - "namespace": "cyberarmor-system", - "resourceVersion": "60787203", - "uid": "da3dd21c-bf13-4d2a-97da-ca80b94d08d3" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-oracle" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_ORACLE_PORT", - "value": "4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8002" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-oracle-ubi:11", - "imagePullPolicy": "Always", - "name": "ca-oracle", - "ports": [ - { - "containerPort": 4000, - "name": "ca-oracle", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:19:01Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-oracle-6c98c6bdbf\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-posture\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-posture\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8001\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-posture-ubi:112\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-posture\",\"ports\":[{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/resources/config\",\"name\":\"ca-posture-score-config\",\"readOnly\":false},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"},{\"configMap\":{\"items\":[{\"key\":\"resourcesdict.json\",\"path\":\"resourcesdict.json\"},{\"key\":\"frameworkdict.json\",\"path\":\"frameworkdict.json\"}],\"name\":\"ca-posture-score-config\"},\"name\":\"ca-posture-score-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:58Z", - "generation": 1, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-posture\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/resources/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-posture-score-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:58Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:45Z" - } - ], - "name": "ca-posture", - "namespace": "cyberarmor-system", - "resourceVersion": "60787259", - "uid": "f41f4dc1-cfb0-4201-bca7-f1cf0b72b6b7" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-posture" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8001" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-posture-ubi:112", - "imagePullPolicy": "Always", - "name": "ca-posture", - "ports": [ - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "500m", - "memory": "100Mi" - }, - "requests": { - "cpu": "100m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/resources/config", - "name": "ca-posture-score-config" - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "resourcesdict.json", - "path": "resourcesdict.json" - }, - { - "key": "frameworkdict.json", - "path": "frameworkdict.json" - } - ], - "name": "ca-posture-score-config" - }, - "name": "ca-posture-score-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:45Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:58Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "ReplicaSet \"ca-posture-5996968d7b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-rbac\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-rbac\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"S3_BUCKET\",\"value\":\"ca-kubernetes-rbac-db-dev\"},{\"name\":\"AWS_REGION\",\"value\":\"eu-west-1\"},{\"name\":\"AWS_ACCESS_KEY_ID\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keyid\",\"name\":\"ca-rbac\"}}},{\"name\":\"AWS_SECRET_ACCESS_KEY\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keysecret\",\"name\":\"ca-rbac\"}}}],\"image\":\"quay.io/armosec/k8s-ca-rbac-scanner-ubi:20\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-rbac\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"400Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:50Z", - "generation": 1, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-rbac\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AWS_ACCESS_KEY_ID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"AWS_REGION\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"AWS_SECRET_ACCESS_KEY\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"S3_BUCKET\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:13Z" - } - ], - "name": "ca-rbac", - "namespace": "cyberarmor-system", - "resourceVersion": "60787051", - "uid": "d5898a09-2489-4254-b210-0725ddb2427a" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-rbac" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "S3_BUCKET", - "value": "ca-kubernetes-rbac-db-dev" - }, - { - "name": "AWS_REGION", - "value": "eu-west-1" - }, - { - "name": "AWS_ACCESS_KEY_ID", - "valueFrom": { - "secretKeyRef": { - "key": "keyid", - "name": "ca-rbac" - } - } - }, - { - "name": "AWS_SECRET_ACCESS_KEY", - "valueFrom": { - "secretKeyRef": { - "key": "keysecret", - "name": "ca-rbac" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-rbac-scanner-ubi:20", - "imagePullPolicy": "Always", - "name": "ca-rbac", - "resources": { - "limits": { - "cpu": "200m", - "memory": "400Mi" - }, - "requests": { - "cpu": "10m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:13Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:50Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "ReplicaSet \"ca-rbac-75c8cfd6b4\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-vuln-scan\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-vuln-scan\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"EVENT_RECEIVER_URL\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\",\"value\":\"4\"}],\"image\":\"quay.io/armosec/k8s-ca-vuln-scan-ubi:84\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-vuln-scan\",\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1.5Gi\"},\"requests\":{\"cpu\":\"500m\",\"memory\":\"1Gi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:47Z", - "generation": 1, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-vuln-scan\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EVENT_RECEIVER_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:00Z" - } - ], - "name": "ca-vuln-scan", - "namespace": "cyberarmor-system", - "resourceVersion": "60786938", - "uid": "9ea3d6cb-c6c0-423f-aab2-630827939285" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-vuln-scan" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "EVENT_RECEIVER_URL", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_MAX_VULN_SCAN_ROUTINS", - "value": "4" - } - ], - "image": "quay.io/armosec/k8s-ca-vuln-scan-ubi:84", - "imagePullPolicy": "Always", - "name": "ca-vuln-scan", - "resources": { - "limits": { - "cpu": "1", - "memory": "1536Mi" - }, - "requests": { - "cpu": "500m", - "memory": "1Gi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:00Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:47Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "ReplicaSet \"ca-vuln-scan-75b499df8c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-webhook\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-webhook\"}},\"template\":{\"metadata\":{\"annotations\":{\"certificate\":\"d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt\"},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-tlsCertFile=/etc/webhook/certs/tls.crt\",\"-tlsKeyFile=/etc/webhook/certs/tls.key\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_WEBHOOK_NAME\",\"value\":\"ca-webhook\"},{\"name\":\"CA_WEBHOOK_PORT\",\"value\":\"443\"},{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_LOGIN_SECRET_NAME\",\"value\":\"ca-login\"},{\"name\":\"CA_ORACLE_SERVER\",\"value\":\"http://ca-oracle:4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"http://ca-notification-server:8001\"},{\"name\":\"CA_OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-webhook-ubi:606\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-webhook\",\"ports\":[{\"containerPort\":443,\"name\":\"mutating-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"600Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"100Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/cazips\",\"name\":\"zip-download\"},{\"mountPath\":\"/etc/webhook/certs\",\"name\":\"ca-cluster-certificate\",\"readOnly\":true},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"emptyDir\":{},\"name\":\"zip-download\"},{\"name\":\"ca-cluster-certificate\",\"secret\":{\"secretName\":\"ca-cluster-certificate\"}},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:46Z", - "generation": 1, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:certificate": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-webhook\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_LOGIN_SECRET_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/cazips\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/webhook/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-cluster-certificate\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"zip-download\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:16Z" - } - ], - "name": "ca-webhook", - "namespace": "cyberarmor-system", - "resourceVersion": "60787072", - "uid": "c968fe90-8480-471f-bdf1-fa98447ce1d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-webhook" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "certificate": "d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt" - }, - "creationTimestamp": null, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-tlsCertFile=/etc/webhook/certs/tls.crt", - "-tlsKeyFile=/etc/webhook/certs/tls.key", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_WEBHOOK_NAME", - "value": "ca-webhook" - }, - { - "name": "CA_WEBHOOK_PORT", - "value": "443" - }, - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_LOGIN_SECRET_NAME", - "value": "ca-login" - }, - { - "name": "CA_ORACLE_SERVER", - "value": "http://ca-oracle:4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "http://ca-notification-server:8001" - }, - { - "name": "CA_OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-webhook-ubi:606", - "imagePullPolicy": "Always", - "name": "ca-webhook", - "ports": [ - { - "containerPort": 443, - "name": "mutating-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "600Mi" - }, - "requests": { - "cpu": "300m", - "memory": "100Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/cazips", - "name": "zip-download" - }, - { - "mountPath": "/etc/webhook/certs", - "name": "ca-cluster-certificate", - "readOnly": true - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "emptyDir": {}, - "name": "zip-download" - }, - { - "name": "ca-cluster-certificate", - "secret": { - "defaultMode": 420, - "secretName": "ca-cluster-certificate" - } - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:16Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:46Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "ReplicaSet \"ca-webhook-7dd8bbd798\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-websocket\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-websocket\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_VULN_SCAN_SCHEDULE\",\"value\":\"@every 11h\"},{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\",\"value\":\"@every 12h\"},{\"name\":\"CA_DEBUG_SIGNER\",\"value\":null}],\"image\":\"quay.io/armosec/k8s-ca-websocket-ubi:406\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-websocket\",\"ports\":[{\"containerPort\":4002,\"name\":\"trigger-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:43Z", - "generation": 1, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-websocket\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_DEBUG_SIGNER\"}": { - ".": {}, - "f:name": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_VULN_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:14Z" - } - ], - "name": "ca-websocket", - "namespace": "cyberarmor-system", - "resourceVersion": "60787065", - "uid": "914f30e9-d858-4945-9314-cbd3422ebaab" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-websocket" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_VULN_SCAN_SCHEDULE", - "value": "@every 11h" - }, - { - "name": "CA_POSTURE_SCAN_SCHEDULE", - "value": "@every 12h" - }, - { - "name": "CA_DEBUG_SIGNER" - } - ], - "image": "quay.io/armosec/k8s-ca-websocket-ubi:406", - "imagePullPolicy": "Always", - "name": "ca-websocket", - "ports": [ - { - "containerPort": 4002, - "name": "trigger-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "1000Mi" - }, - "requests": { - "cpu": "300m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:14Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:43Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "ReplicaSet \"ca-websocket-857758846f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"adservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"adservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"adservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/adservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"name\":\"server\",\"ports\":[{\"containerPort\":9555}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"180Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:51Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":9555,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:12Z" - } - ], - "name": "adservice", - "namespace": "hipster", - "resourceVersion": "61263240", - "uid": "368bea36-82be-4c28-8607-cf931a836185" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "adservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6415784d-d96b-4866-9c10-d571c8d8fd35", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:29", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-adservice" - }, - "creationTimestamp": null, - "labels": { - "app": "adservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/adservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 9555, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "300Mi" - }, - "requests": { - "cpu": "200m", - "memory": "180Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:24Z", - "lastUpdateTime": "2021-10-12T00:12:24Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:51Z", - "lastUpdateTime": "2021-10-13T00:28:12Z", - "message": "ReplicaSet \"adservice-7864446d5c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"cartservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"cartservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"cartservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"REDIS_ADDR\",\"value\":\"redis-cart:6379\"}],\"image\":\"gcr.io/google-samples/microservices-demo/cartservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15,\"periodSeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":7070}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:47Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"REDIS_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7070,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T09:40:08Z" - } - ], - "name": "cartservice", - "namespace": "hipster", - "resourceVersion": "61443544", - "uid": "df767287-ffc1-4559-b7fd-32b09bf6208c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "cartservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "7ced7c5c-c483-40b3-b6bc-8829339dc3e1", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:04", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-cartservice" - }, - "creationTimestamp": null, - "labels": { - "app": "cartservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "REDIS_ADDR", - "value": "redis-cart:6379" - } - ], - "image": "gcr.io/google-samples/microservices-demo/cartservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7070, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "128Mi" - }, - "requests": { - "cpu": "200m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-13T00:27:35Z", - "message": "ReplicaSet \"cartservice-7c8f8f9ddd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T09:40:08Z", - "lastUpdateTime": "2021-10-13T09:40:08Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"checkoutservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"checkoutservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"checkoutservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"5050\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"PAYMENT_SERVICE_ADDR\",\"value\":\"paymentservice:50051\"},{\"name\":\"EMAIL_SERVICE_ADDR\",\"value\":\"emailservice:5000\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"}],\"image\":\"gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":5050}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:42Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EMAIL_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PAYMENT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":5050,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:42Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:41Z" - } - ], - "name": "checkoutservice", - "namespace": "hipster", - "resourceVersion": "61262985", - "uid": "b5e6a8d8-1ec6-4acc-bf14-e3bb28bff284" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "checkoutservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "bebad8bb-8728-4813-ae19-d22a38a289a5", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:28", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-checkoutservice" - }, - "creationTimestamp": null, - "labels": { - "app": "checkoutservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "5050" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "PAYMENT_SERVICE_ADDR", - "value": "paymentservice:50051" - }, - { - "name": "EMAIL_SERVICE_ADDR", - "value": "emailservice:5000" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - } - ], - "image": "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 5050, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T14:05:32Z", - "lastUpdateTime": "2021-10-12T14:05:32Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:42Z", - "lastUpdateTime": "2021-10-13T00:27:42Z", - "message": "ReplicaSet \"checkoutservice-86c564466c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"currencyservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"currencyservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"currencyservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"7000\"}],\"image\":\"gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":7000,\"name\":\"grpc\"}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T08:37:54Z" - } - ], - "name": "currencyservice", - "namespace": "hipster", - "resourceVersion": "61423238", - "uid": "167b75e1-1be2-4764-aaad-dbb1ae248d3c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "currencyservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "4aa34494-0348-4859-9e29-56df9baf52ba", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-currencyservice" - }, - "creationTimestamp": null, - "labels": { - "app": "currencyservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "7000" - } - ], - "image": "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7000, - "name": "grpc", - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:29:19Z", - "message": "ReplicaSet \"currencyservice-544b6d849c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T08:37:54Z", - "lastUpdateTime": "2021-10-13T08:37:54Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"emailservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"emailservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"emailservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"DISABLE_PROFILER\",\"value\":\"1\"}],\"image\":\"gcr.io/google-samples/microservices-demo/emailservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:41Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"DISABLE_PROFILER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:41Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:07Z" - } - ], - "name": "emailservice", - "namespace": "hipster", - "resourceVersion": "61263204", - "uid": "9959433f-c964-4e6d-a2d7-3d1b9b617948" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "emailservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "e8aa9826-2367-44e1-9aad-a6d617b0fa06", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:48", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-emailservice" - }, - "creationTimestamp": null, - "labels": { - "app": "emailservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "DISABLE_PROFILER", - "value": "1" - } - ], - "image": "gcr.io/google-samples/microservices-demo/emailservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-12T00:11:47Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:41Z", - "lastUpdateTime": "2021-10-13T00:28:08Z", - "message": "ReplicaSet \"emailservice-cc7c4cd87\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"frontend\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"frontend\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"frontend\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"},{\"name\":\"RECOMMENDATION_SERVICE_ADDR\",\"value\":\"recommendationservice:8080\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"CHECKOUT_SERVICE_ADDR\",\"value\":\"checkoutservice:5050\"},{\"name\":\"AD_SERVICE_ADDR\",\"value\":\"adservice:9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/frontend:v0.2.3\",\"livenessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-liveness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-readiness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:44Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AD_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CHECKOUT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"RECOMMENDATION_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:44Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:34Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:22Z" - } - ], - "name": "frontend", - "namespace": "hipster", - "resourceVersion": "61263336", - "uid": "86b92d9e-22ad-4f0a-be26-41343f05f0d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "frontend" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9611f05f-4a8b-48ff-9722-e6a2ec702d65", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:57", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-frontend", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "frontend", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - }, - { - "name": "RECOMMENDATION_SERVICE_ADDR", - "value": "recommendationservice:8080" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "CHECKOUT_SERVICE_ADDR", - "value": "checkoutservice:5050" - }, - { - "name": "AD_SERVICE_ADDR", - "value": "adservice:9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/frontend:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-liveness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-readiness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:04Z", - "lastUpdateTime": "2021-10-12T00:12:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:44Z", - "lastUpdateTime": "2021-10-13T00:28:23Z", - "message": "ReplicaSet \"frontend-c747f6f47\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"loadgenerator\",\"namespace\":\"hipster\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"loadgenerator\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"loadgenerator\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"FRONTEND_ADDR\",\"value\":\"frontend:80\"},{\"name\":\"USERS\",\"value\":\"10\"}],\"image\":\"gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3\",\"name\":\"main\",\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"256Mi\"}}}],\"restartPolicy\":\"Always\",\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"main\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"FRONTEND_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"USERS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:38Z" - } - ], - "name": "loadgenerator", - "namespace": "hipster", - "resourceVersion": "61263451", - "uid": "e9200650-d25d-43f2-b1bc-4615beaed50c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "loadgenerator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "baca3d0f-fdc8-42c6-a9b1-ee29b3d173e0", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:26", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-loadgenerator", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "loadgenerator", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "FRONTEND_ADDR", - "value": "frontend:80" - }, - { - "name": "USERS", - "value": "10" - } - ], - "image": "gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "name": "main", - "resources": { - "limits": { - "cpu": "500m", - "memory": "512Mi" - }, - "requests": { - "cpu": "300m", - "memory": "256Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-13T00:24:15Z", - "lastUpdateTime": "2021-10-13T00:24:15Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:28:38Z", - "message": "ReplicaSet \"loadgenerator-6dcb6ffc4f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"paymentservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"paymentservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"paymentservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:45Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:45Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:29:27Z" - } - ], - "name": "paymentservice", - "namespace": "hipster", - "resourceVersion": "61263785", - "uid": "ab21c30f-d153-4ea8-982e-e12a71745dae" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "paymentservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "60b5720d-99b5-47a0-8bc4-656b372a6d17", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:52", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-paymentservice" - }, - "creationTimestamp": null, - "labels": { - "app": "paymentservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:45Z", - "lastUpdateTime": "2021-10-13T00:29:27Z", - "message": "ReplicaSet \"paymentservice-849b876ffd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"productcatalogservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"productcatalogservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"productcatalogservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":3550}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:46Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":3550,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:57Z" - } - ], - "name": "productcatalogservice", - "namespace": "hipster", - "resourceVersion": "61263117", - "uid": "50b29b6e-0f97-43b8-9555-a53d9c0e18f9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "productcatalogservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9bb4cc06-3907-401b-919f-c2974a623068", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-productcatalogservice" - }, - "creationTimestamp": null, - "labels": { - "app": "productcatalogservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 3550, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:46Z", - "lastUpdateTime": "2021-10-13T00:27:57Z", - "message": "ReplicaSet \"productcatalogservice-586fd876d5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"recommendationservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"recommendationservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"recommendationservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"450Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"220Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:43Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:37Z" - } - ], - "name": "recommendationservice", - "namespace": "hipster", - "resourceVersion": "61263443", - "uid": "00437f28-24c4-4759-ab93-f0be948eabc9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "recommendationservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "8cace306-b3ce-4f2f-8a6f-b122873b4eee", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-recommendationservice" - }, - "creationTimestamp": null, - "labels": { - "app": "recommendationservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "450Mi" - }, - "requests": { - "cpu": "100m", - "memory": "220Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-12T00:11:50Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:43Z", - "lastUpdateTime": "2021-10-13T00:28:37Z", - "message": "ReplicaSet \"recommendationservice-54b7b7b95d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"redis-cart\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"redis-cart\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"redis-cart\"}},\"spec\":{\"containers\":[{\"image\":\"redis:alpine\",\"livenessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"name\":\"redis\",\"ports\":[{\"containerPort\":6379}],\"readinessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"resources\":{\"limits\":{\"cpu\":\"125m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"70m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/data\",\"name\":\"redis-data\"}]}],\"volumes\":[{\"emptyDir\":{},\"name\":\"redis-data\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:50Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"redis\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":6379,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/data\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"redis-data\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:38Z" - } - ], - "name": "redis-cart", - "namespace": "hipster", - "resourceVersion": "61262948", - "uid": "76b3aebb-9ec5-479e-81ae-975ccf1bc6ec" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "redis-cart" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "838a7c21-618b-4693-a13b-838a9231ca58", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-redis-cart" - }, - "creationTimestamp": null, - "labels": { - "app": "redis-cart", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "image": "redis:alpine", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "name": "redis", - "ports": [ - { - "containerPort": 6379, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "125m", - "memory": "256Mi" - }, - "requests": { - "cpu": "70m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/data", - "name": "redis-data" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "emptyDir": {}, - "name": "redis-data" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:57Z", - "lastUpdateTime": "2021-10-12T00:11:57Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-13T00:27:38Z", - "message": "ReplicaSet \"redis-cart-594778c8b9\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"shippingservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"shippingservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"shippingservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:49Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:49Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:11Z" - } - ], - "name": "shippingservice", - "namespace": "hipster", - "resourceVersion": "61262726", - "uid": "febd2fe5-0e28-448e-aabd-31904ebb82a9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "shippingservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6503b850-839c-4b73-95ab-195d27b3c10d", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:26:58", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-shippingservice" - }, - "creationTimestamp": null, - "labels": { - "app": "shippingservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:00Z", - "lastUpdateTime": "2021-10-12T00:12:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:49Z", - "lastUpdateTime": "2021-10-13T00:27:11Z", - "message": "ReplicaSet \"shippingservice-758c9b4d4b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":\"10%\",\"maxUnavailable\":0}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"kubedns\",\"prometheus.io/port\":\"10054\",\"prometheus.io/scrape\":\"true\",\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"labels\":{\"k8s-app\":\"kube-dns\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchExpressions\":[{\"key\":\"k8s-app\",\"operator\":\"In\",\"values\":[\"kube-dns\"]}]},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"--domain=cluster.local.\",\"--dns-port=10053\",\"--config-dir=/kube-dns-config\",\"--v=2\"],\"env\":[{\"name\":\"PROMETHEUS_PORT\",\"value\":\"10055\"}],\"image\":\"gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/kubedns\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"kubedns\",\"ports\":[{\"containerPort\":10053,\"name\":\"dns-local\",\"protocol\":\"UDP\"},{\"containerPort\":10053,\"name\":\"dns-tcp-local\",\"protocol\":\"TCP\"},{\"containerPort\":10055,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readiness\",\"port\":8081,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":3,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"memory\":\"210Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"70Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001},\"volumeMounts\":[{\"mountPath\":\"/kube-dns-config\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"-v=2\",\"-logtostderr\",\"-configDir=/etc/k8s/dns/dnsmasq-nanny\",\"-restartDnsmasq=true\",\"--\",\"-k\",\"--cache-size=1000\",\"--no-negcache\",\"--dns-forward-max=1500\",\"--log-facility=-\",\"--server=/cluster.local/127.0.0.1#10053\",\"--server=/in-addr.arpa/127.0.0.1#10053\",\"--server=/ip6.arpa/127.0.0.1#10053\"],\"image\":\"gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/dnsmasq\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"dnsmasq\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"150m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"capabilities\":{\"add\":[\"NET_BIND_SERVICE\",\"SETGID\"],\"drop\":[\"all\"]}},\"volumeMounts\":[{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"--v=2\",\"--logtostderr\",\"--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV\",\"--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV\"],\"image\":\"gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/metrics\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"sidecar\",\"ports\":[{\"containerPort\":10054,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001}}],\"dnsPolicy\":\"Default\",\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 4, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:scheduler.alpha.kubernetes.io/critical-pod": {}, - "f:seccomp.security.alpha.kubernetes.io/pod": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:podAntiAffinity": { - ".": {}, - "f:preferredDuringSchedulingIgnoredDuringExecution": {} - } - }, - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:capabilities": { - ".": {}, - "f:add": {}, - "f:drop": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"kubedns\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PROMETHEUS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10053,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10053,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10055,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/kube-dns-config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"sidecar\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10054,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - "f:image": {} - }, - "k:{\"name\":\"kubedns\"}": { - "f:image": {} - }, - "k:{\"name\":\"sidecar\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:06:26Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "53109905", - "uid": "cd5cca24-7cd2-4548-a5d3-d90beb79f9e8" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 2, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "10%", - "maxUnavailable": 0 - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "kubedns", - "prometheus.io/port": "10054", - "prometheus.io/scrape": "true", - "scheduler.alpha.kubernetes.io/critical-pod": "", - "seccomp.security.alpha.kubernetes.io/pod": "runtime/default" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns" - } - }, - "spec": { - "affinity": { - "podAntiAffinity": { - "preferredDuringSchedulingIgnoredDuringExecution": [ - { - "podAffinityTerm": { - "labelSelector": { - "matchExpressions": [ - { - "key": "k8s-app", - "operator": "In", - "values": [ - "kube-dns" - ] - } - ] - }, - "topologyKey": "kubernetes.io/hostname" - }, - "weight": 100 - } - ] - } - }, - "containers": [ - { - "args": [ - "--domain=cluster.local.", - "--dns-port=10053", - "--config-dir=/kube-dns-config", - "--v=2" - ], - "env": [ - { - "name": "PROMETHEUS_PORT", - "value": "10055" - } - ], - "image": "gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/kubedns", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "kubedns", - "ports": [ - { - "containerPort": 10053, - "name": "dns-local", - "protocol": "UDP" - }, - { - "containerPort": 10053, - "name": "dns-tcp-local", - "protocol": "TCP" - }, - { - "containerPort": 10055, - "name": "metrics", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/readiness", - "port": 8081, - "scheme": "HTTP" - }, - "initialDelaySeconds": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "resources": { - "limits": { - "memory": "210Mi" - }, - "requests": { - "cpu": "100m", - "memory": "70Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/kube-dns-config", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "-v=2", - "-logtostderr", - "-configDir=/etc/k8s/dns/dnsmasq-nanny", - "-restartDnsmasq=true", - "--", - "-k", - "--cache-size=1000", - "--no-negcache", - "--dns-forward-max=1500", - "--log-facility=-", - "--server=/cluster.local/127.0.0.1#10053", - "--server=/in-addr.arpa/127.0.0.1#10053", - "--server=/ip6.arpa/127.0.0.1#10053" - ], - "image": "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/dnsmasq", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "dnsmasq", - "ports": [ - { - "containerPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "150m", - "memory": "20Mi" - } - }, - "securityContext": { - "capabilities": { - "add": [ - "NET_BIND_SERVICE", - "SETGID" - ], - "drop": [ - "all" - ] - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/k8s/dns/dnsmasq-nanny", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "--v=2", - "--logtostderr", - "--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV", - "--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV" - ], - "image": "gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/metrics", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "sidecar", - "ports": [ - { - "containerPort": 10054, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns", - "serviceAccountName": "kube-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 2, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-09-11T01:57:38Z", - "message": "ReplicaSet \"kube-dns-59844ff879\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:06:26Z", - "lastUpdateTime": "2021-09-25T17:06:26Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 4, - "readyReplicas": 2, - "replicas": 2, - "updatedReplicas": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns-autoscaler\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns-autoscaler\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"spec\":{\"containers\":[{\"command\":[\"/cluster-proportional-autoscaler\",\"--namespace=kube-system\",\"--configmap=kube-dns-autoscaler\",\"--target=Deployment/kube-dns\",\"--default-params={\\\"linear\\\":{\\\"coresPerReplica\\\":256,\\\"nodesPerReplica\\\":16,\\\"preventSinglePointFailure\\\":true,\\\"includeUnschedulableNodes\\\":true}}\",\"--logtostderr=true\",\"--v=2\"],\"image\":\"gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0\",\"name\":\"autoscaler\",\"resources\":{\"requests\":{\"cpu\":\"20m\",\"memory\":\"10Mi\"}}}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"seccompProfile\":{\"type\":\"RuntimeDefault\"},\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns-autoscaler\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns-autoscaler", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"autoscaler\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:02:52Z" - } - ], - "name": "kube-dns-autoscaler", - "namespace": "kube-system", - "resourceVersion": "53108562", - "uid": "c84ce079-f3c8-46ba-871f-0f2d42ffee1e" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/cluster-proportional-autoscaler", - "--namespace=kube-system", - "--configmap=kube-dns-autoscaler", - "--target=Deployment/kube-dns", - "--default-params={\"linear\":{\"coresPerReplica\":256,\"nodesPerReplica\":16,\"preventSinglePointFailure\":true,\"includeUnschedulableNodes\":true}}", - "--logtostderr=true", - "--v=2" - ], - "image": "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "autoscaler", - "resources": { - "requests": { - "cpu": "20m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "seccompProfile": { - "type": "RuntimeDefault" - }, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns-autoscaler", - "serviceAccountName": "kube-dns-autoscaler", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:54:39Z", - "message": "ReplicaSet \"kube-dns-autoscaler-844c9d9448\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:02:52Z", - "lastUpdateTime": "2021-09-25T17:02:52Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"glbc\",\"kubernetes.io/cluster-service\":\"true\",\"kubernetes.io/name\":\"GLBC\"},\"name\":\"l7-default-backend\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"glbc\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"glbc\",\"name\":\"glbc\"}},\"spec\":{\"containers\":[{\"image\":\"k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":30,\"timeoutSeconds\":5},\"name\":\"default-http-backend\",\"ports\":[{\"containerPort\":8080}],\"resources\":{\"limits\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}}}],\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"tolerations\":[{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "glbc", - "kubernetes.io/cluster-service": "true", - "kubernetes.io/name": "GLBC" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:kubernetes.io/name": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:name": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"default-http-backend\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:seccompProfile": { - "f:type": {} - } - }, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:01:20Z" - } - ], - "name": "l7-default-backend", - "namespace": "kube-system", - "resourceVersion": "53107969", - "uid": "32a76c03-37a1-44e9-b293-dd6b46ed274b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "glbc" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "glbc", - "name": "glbc" - } - }, - "spec": { - "containers": [ - { - "image": "k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 30, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "default-http-backend", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "10m", - "memory": "20Mi" - }, - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:56:25Z", - "message": "ReplicaSet \"l7-default-backend-56cb9644f6\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:01:20Z", - "lastUpdateTime": "2021-09-25T17:01:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "24", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metrics-server\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server-v0.3.6\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server\"},\"spec\":{\"containers\":[{\"command\":[\"/metrics-server\",\"--metric-resolution=30s\",\"--kubelet-port=10255\",\"--deprecated-kubelet-completely-insecure=true\",\"--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP\"],\"image\":\"k8s.gcr.io/metrics-server-amd64:v0.3.6\",\"name\":\"metrics-server\",\"ports\":[{\"containerPort\":443,\"name\":\"https\",\"protocol\":\"TCP\"}]},{\"command\":[\"/pod_nanny\",\"--config-dir=/etc/config\",\"--cpu=40m\",\"--extra-cpu=0.5m\",\"--memory=35Mi\",\"--extra-memory=4Mi\",\"--threshold=5\",\"--deployment=metrics-server-v0.3.6\",\"--container=metrics-server\",\"--poll-period=300000\",\"--estimator=exponential\",\"--scale-down-delay=24h\",\"--minClusterSize=5\",\"--use-metrics=true\"],\"env\":[{\"name\":\"MY_POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"MY_POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"gke.gcr.io/addon-resizer:1.8.11-gke.0\",\"name\":\"metrics-server-nanny\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"5m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"metrics-server-config-volume\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"metrics-server\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"metrics-server-config\"},\"name\":\"metrics-server-config-volume\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 24, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metrics-server", - "kubernetes.io/cluster-service": "true", - "version": "v0.3.6" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:version": {} - }, - "f:name": {} - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - }, - "k:{\"name\":\"metrics-server-nanny\"}": { - ".": {}, - "f:command": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"MY_POD_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"MY_POD_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"metrics-server-config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - "f:resources": { - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - } - } - } - } - } - } - }, - "manager": "pod_nanny", - "operation": "Update", - "time": "2021-06-13T13:42:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-26T17:13:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-26T17:13:52Z" - } - ], - "name": "metrics-server-v0.3.6", - "namespace": "kube-system", - "resourceVersion": "53582788", - "uid": "872d0f34-7998-45d3-9eea-570e0a47e03c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - }, - "name": "metrics-server" - }, - "spec": { - "containers": [ - { - "command": [ - "/metrics-server", - "--metric-resolution=30s", - "--kubelet-port=10255", - "--deprecated-kubelet-completely-insecure=true", - "--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP" - ], - "image": "k8s.gcr.io/metrics-server-amd64:v0.3.6", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server", - "ports": [ - { - "containerPort": 443, - "name": "https", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "44m", - "memory": "63Mi" - }, - "requests": { - "cpu": "44m", - "memory": "63Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - }, - { - "command": [ - "/pod_nanny", - "--config-dir=/etc/config", - "--cpu=40m", - "--extra-cpu=0.5m", - "--memory=35Mi", - "--extra-memory=4Mi", - "--threshold=5", - "--deployment=metrics-server-v0.3.6", - "--container=metrics-server", - "--poll-period=300000", - "--estimator=exponential", - "--scale-down-delay=24h", - "--minClusterSize=5", - "--use-metrics=true" - ], - "env": [ - { - "name": "MY_POD_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.name" - } - } - }, - { - "name": "MY_POD_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - } - ], - "image": "gke.gcr.io/addon-resizer:1.8.11-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server-nanny", - "resources": { - "limits": { - "cpu": "100m", - "memory": "300Mi" - }, - "requests": { - "cpu": "5m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "metrics-server-config-volume" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "serviceAccount": "metrics-server", - "serviceAccountName": "metrics-server", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "metrics-server-config" - }, - "name": "metrics-server-config-volume" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-09-25T17:12:33Z", - "lastUpdateTime": "2021-09-25T17:12:33Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-06-13T13:42:20Z", - "lastUpdateTime": "2021-09-26T17:13:52Z", - "message": "ReplicaSet \"metrics-server-v0.3.6-7889654bbb\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 24, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "6", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-proxy\"},\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-proxy\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-proxy\"}},\"spec\":{\"containers\":[{\"command\":[\"/bin/sh\",\"-c\",\"kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\\u003e\\u003e/var/log/kube-proxy.log 2\\u003e\\u00261\"],\"env\":[{\"name\":\"KUBERNETES_SERVICE_HOST\",\"value\":\"34.78.97.243\"}],\"image\":\"gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001\",\"name\":\"kube-proxy\",\"resources\":{\"requests\":{\"cpu\":\"100m\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/log\",\"name\":\"varlog\",\"readOnly\":false},{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/lib/modules\",\"name\":\"lib-modules\",\"readOnly\":true}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\",\"node.kubernetes.io/kube-proxy-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"kube-proxy\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/log\"},\"name\":\"varlog\"},{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"hostPath\":{\"path\":\"/lib/modules\"},\"name\":\"lib-modules\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "generation": 6, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-proxy" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBERNETES_SERVICE_HOST\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/kube-proxy-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - "f:command": {}, - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:44Z" - } - ], - "name": "kube-proxy", - "namespace": "kube-system", - "resourceVersion": "52161714", - "uid": "bb6f9ab0-e586-407b-95c0-773637c696e8" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-proxy" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-proxy" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "env": [ - { - "name": "KUBERNETES_SERVICE_HOST", - "value": "34.78.97.243" - } - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux", - "node.kubernetes.io/kube-proxy-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "kube-proxy", - "serviceAccountName": "kube-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 6 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"},\"name\":\"metadata-proxy-v0.1\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metadata-proxy\",\"version\":\"v0.1\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"}},\"spec\":{\"containers\":[{\"args\":[\"--addr=0.0.0.0:988\"],\"image\":\"k8s.gcr.io/metadata-proxy:v0.1.12\",\"name\":\"metadata-proxy\",\"resources\":{\"limits\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"},\"requests\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"}},\"securityContext\":{\"privileged\":true}}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"cloud.google.com/metadata-proxy-ready\":\"true\",\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"metadata-proxy\",\"terminationGracePeriodSeconds\":30,\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 3, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:cloud.google.com/metadata-proxy-ready": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - "f:args": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - } - ], - "name": "metadata-proxy-v0.1", - "namespace": "kube-system", - "resourceVersion": "25934435", - "uid": "94bf5845-f77b-47d4-bcec-e78549b4d8a3" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metadata-proxy", - "version": "v0.1" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--addr=0.0.0.0:988" - ], - "image": "k8s.gcr.io/metadata-proxy:v0.1.12", - "imagePullPolicy": "IfNotPresent", - "name": "metadata-proxy", - "resources": { - "limits": { - "cpu": "30m", - "memory": "25Mi" - }, - "requests": { - "cpu": "30m", - "memory": "25Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "cloud.google.com/metadata-proxy-ready": "true", - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "metadata-proxy", - "serviceAccountName": "metadata-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 3 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"node-local-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"node-local-dns\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"nodelocaldns\",\"components.gke.io/component-version\":\"1.4.0\",\"prometheus.io/port\":\"9253\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"k8s-app\":\"node-local-dns\"}},\"spec\":{\"containers\":[{\"args\":[\"-localip\",\"169.254.20.10,10.72.0.10\",\"-conf\",\"/etc/Corefile\",\"-upstreamsvc\",\"kube-dns-upstream\",\"-kubednscm\",\"/etc/kube-dns\"],\"image\":\"gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1\",\"livenessProbe\":{\"httpGet\":{\"host\":\"169.254.20.10\",\"path\":\"/health\",\"port\":8080},\"initialDelaySeconds\":60,\"timeoutSeconds\":5},\"name\":\"node-cache\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"},{\"containerPort\":9253,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"25m\",\"memory\":\"5Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/etc/coredns\",\"name\":\"config-volume\"},{\"mountPath\":\"/etc/kube-dns\",\"name\":\"kube-dns-config\"}]}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"addon.gke.io/node-local-dns-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"node-local-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"},{\"configMap\":{\"items\":[{\"key\":\"Corefile\",\"path\":\"Corefile.base\"}],\"name\":\"node-local-dns\"},\"name\":\"config-volume\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"}}}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "node-local-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:host": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":9253,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/coredns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/kube-dns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:addon.gke.io/node-local-dns-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "53114241", - "uid": "5069e9ba-0784-41bf-9577-3757bcb3b6d6" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "node-local-dns" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "nodelocaldns", - "components.gke.io/component-version": "1.4.0", - "prometheus.io/port": "9253", - "prometheus.io/scrape": "true" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "node-local-dns" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-localip", - "169.254.20.10,10.72.0.10", - "-conf", - "/etc/Corefile", - "-upstreamsvc", - "kube-dns-upstream", - "-kubednscm", - "/etc/kube-dns" - ], - "image": "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "host": "169.254.20.10", - "path": "/health", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "node-cache", - "ports": [ - { - "containerPort": 53, - "hostPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "hostPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - }, - { - "containerPort": 9253, - "hostPort": 9253, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "25m", - "memory": "5Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/etc/coredns", - "name": "config-volume" - }, - { - "mountPath": "/etc/kube-dns", - "name": "kube-dns-config" - } - ] - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "addon.gke.io/node-local-dns-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "node-local-dns", - "serviceAccountName": "node-local-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "Corefile", - "path": "Corefile.base" - } - ], - "name": "node-local-dns" - }, - "name": "config-volume" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 2, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"nvidia-gpu-device-plugin\"},\"name\":\"nvidia-gpu-device-plugin\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"cloud.google.com/gke-accelerator\",\"operator\":\"Exists\"}]}]}}},\"containers\":[{\"command\":[\"/usr/bin/nvidia-gpu-device-plugin\",\"-logtostderr\",\"--enable-container-gpu-metrics\",\"--enable-health-monitoring\"],\"env\":[{\"name\":\"LD_LIBRARY_PATH\",\"value\":\"/usr/local/nvidia/lib64\"}],\"image\":\"gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317\",\"name\":\"nvidia-gpu-device-plugin\",\"ports\":[{\"containerPort\":2112,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/device-plugin\",\"name\":\"device-plugin\"},{\"mountPath\":\"/dev\",\"name\":\"dev\"},{\"mountPath\":\"/usr/local/nvidia\",\"name\":\"nvidia\"},{\"mountPath\":\"/var/lib/kubelet/pod-resources\",\"name\":\"pod-resources\"},{\"mountPath\":\"/proc\",\"name\":\"proc\"},{\"mountPath\":\"/etc/nvidia\",\"name\":\"nvidia-config\"}]}],\"priorityClassName\":\"system-node-critical\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/device-plugins\"},\"name\":\"device-plugin\"},{\"hostPath\":{\"path\":\"/dev\"},\"name\":\"dev\"},{\"hostPath\":{\"path\":\"/home/kubernetes/bin/nvidia\",\"type\":\"Directory\"},\"name\":\"nvidia\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/pod-resources\"},\"name\":\"pod-resources\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"proc\"},{\"hostPath\":{\"path\":\"/etc/nvidia\"},\"name\":\"nvidia-config\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:17Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "nvidia-gpu-device-plugin" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:nodeAffinity": { - ".": {}, - "f:requiredDuringSchedulingIgnoredDuringExecution": { - ".": {}, - "f:nodeSelectorTerms": {} - } - } - }, - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"LD_LIBRARY_PATH\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":2112,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/device-plugin\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/local/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet/pod-resources\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"dev\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"device-plugin\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"nvidia\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"pod-resources\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - "f:command": {}, - "f:image": {}, - "f:volumeMounts": { - "k:{\"mountPath\":\"/etc/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/proc\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:volumes": { - "k:{\"name\":\"nvidia-config\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"proc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "nvidia-gpu-device-plugin", - "namespace": "kube-system", - "resourceVersion": "25934477", - "uid": "14396a20-ecee-4671-aefe-2a5b9d2e0dde" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "spec": { - "affinity": { - "nodeAffinity": { - "requiredDuringSchedulingIgnoredDuringExecution": { - "nodeSelectorTerms": [ - { - "matchExpressions": [ - { - "key": "cloud.google.com/gke-accelerator", - "operator": "Exists" - } - ] - } - ] - } - } - }, - "containers": [ - { - "command": [ - "/usr/bin/nvidia-gpu-device-plugin", - "-logtostderr", - "--enable-container-gpu-metrics", - "--enable-health-monitoring" - ], - "env": [ - { - "name": "LD_LIBRARY_PATH", - "value": "/usr/local/nvidia/lib64" - } - ], - "image": "gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317", - "imagePullPolicy": "IfNotPresent", - "name": "nvidia-gpu-device-plugin", - "ports": [ - { - "containerPort": 2112, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "20Mi" - }, - "requests": { - "cpu": "50m", - "memory": "20Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/device-plugin", - "name": "device-plugin" - }, - { - "mountPath": "/dev", - "name": "dev" - }, - { - "mountPath": "/usr/local/nvidia", - "name": "nvidia" - }, - { - "mountPath": "/var/lib/kubelet/pod-resources", - "name": "pod-resources" - }, - { - "mountPath": "/proc", - "name": "proc" - }, - { - "mountPath": "/etc/nvidia", - "name": "nvidia-config" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/device-plugins", - "type": "" - }, - "name": "device-plugin" - }, - { - "hostPath": { - "path": "/dev", - "type": "" - }, - "name": "dev" - }, - { - "hostPath": { - "path": "/home/kubernetes/bin/nvidia", - "type": "Directory" - }, - "name": "nvidia" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/pod-resources", - "type": "" - }, - "name": "pod-resources" - }, - { - "hostPath": { - "path": "/proc", - "type": "" - }, - "name": "proc" - }, - { - "hostPath": { - "path": "/etc/nvidia", - "type": "" - }, - "name": "nvidia-config" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:02:45.009201226Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:02:48Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"6de798cc-d558-479a-8ef4-38363e434633\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.63\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:02:55Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-5naq", - "uid": "6de798cc-d558-479a-8ef4-38363e434633" - } - ], - "resourceVersion": "53108585", - "uid": "fdd66d80-d09d-4b43-a291-b3797c7a5864" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-5naq", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://50767376b8a42b7a390e84c5c451d1485b1a562873b915100dc605bbcc49c1c5", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:02:48Z" - } - } - } - ], - "hostIP": "10.132.0.63", - "phase": "Running", - "podIP": "10.132.0.63", - "podIPs": [ - { - "ip": "10.132.0.63" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:02:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:09:05.595580038Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:09:09Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"d288c56c-2a00-42fe-b2ea-b8761fec2a4e\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.193\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:09:16Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-abj3", - "uid": "d288c56c-2a00-42fe-b2ea-b8761fec2a4e" - } - ], - "resourceVersion": "53110982", - "uid": "0866b060-d7a6-40bc-9ed9-292fbce958e9" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-abj3", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b04121a3de085254493b48dbe1be551abd021877d1c098afbd19e6429df8f4ba", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:09:08Z" - } - } - } - ], - "hostIP": "10.132.15.193", - "phase": "Running", - "podIP": "10.132.15.193", - "podIPs": [ - { - "ip": "10.132.15.193" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:09:06Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:56:27.195784979Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:56:29Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"9aa58d78-0147-4564-9900-0409a6bec341\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.61\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:56:37Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-enr8", - "uid": "9aa58d78-0147-4564-9900-0409a6bec341" - } - ], - "resourceVersion": "53106105", - "uid": "b940e7b5-9e7f-4ac7-a3ee-6c6655c1e65a" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-enr8", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b9375aed4bc463ecfa5fcfb0cfb3b55d087416bfe0c3267c1395e8f93569d03c", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:56:29Z" - } - } - } - ], - "hostIP": "10.132.0.61", - "phase": "Running", - "podIP": "10.132.0.61", - "podIPs": [ - { - "ip": "10.132.0.61" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:56:28Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:59:41.285621877Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:59:44Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"c1ab3c15-9764-40f5-ba6b-82556dc98ea2\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.62\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:59:52Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-oq2w", - "uid": "c1ab3c15-9764-40f5-ba6b-82556dc98ea2" - } - ], - "resourceVersion": "53107378", - "uid": "19e52dea-6339-4ed7-8e32-3d39b242d133" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-oq2w", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://a0b27bef16953a38c48075124547583280bccf28d1d6cf54c3b3e754e2847c86", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:59:44Z" - } - } - } - ], - "hostIP": "10.132.0.62", - "phase": "Running", - "podIP": "10.132.0.62", - "podIPs": [ - { - "ip": "10.132.0.62" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:59:42Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:12:12.095932889Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:12:15Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"7042c0e8-8dc5-4d1d-8b36-92c692c31c76\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.194\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:12:22Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-rgdp", - "uid": "7042c0e8-8dc5-4d1d-8b36-92c692c31c76" - } - ], - "resourceVersion": "53112149", - "uid": "5248c280-7bde-4fe9-a74e-56ae25abb0d2" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-rgdp", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://fd91ae480585a78c59ef401dc852d58921e76693ecbd908d98e4b63da6c298ff", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:12:14Z" - } - } - } - ], - "hostIP": "10.132.15.194", - "phase": "Running", - "podIP": "10.132.15.194", - "podIPs": [ - { - "ip": "10.132.15.194" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:12:13Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:05:45.558688986Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:05:49Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"a58f61e7-9d9e-4266-90d4-16b9969cb373\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.192\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:05:56Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-x940", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-x940", - "uid": "a58f61e7-9d9e-4266-90d4-16b9969cb373" - } - ], - "resourceVersion": "53109692", - "uid": "71a05734-f741-4b7e-82fe-765c555b3607" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-x940", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://6abab671623159f7174321118f58600f8955267a139a72508e9a73631ef7920d", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:05:48Z" - } - } - } - ], - "hostIP": "10.132.15.192", - "phase": "Running", - "podIP": "10.132.15.192", - "podIPs": [ - { - "ip": "10.132.15.192" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:05:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:15:06.466708143Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:15:10Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"65f37105-dd71-428b-bf8b-0e82b88027f1\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.195\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:15:17Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-zzyg", - "uid": "65f37105-dd71-428b-bf8b-0e82b88027f1" - } - ], - "resourceVersion": "53113200", - "uid": "dac23622-ae54-4a1a-a6ca-3c020911966e" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-zzyg", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://ee309dad5cb7047fcbd7eb0401760ccb4bd986080ab11c860911e37b132a2a5c", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:15:09Z" - } - } - } - ], - "hostIP": "10.132.15.195", - "phase": "Running", - "podIP": "10.132.15.195", - "podIPs": [ - { - "ip": "10.132.15.195" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:15:07Z" - } - } - ], - "listInputKinds": null - } - ], - "remediation": "Define a network policy that restricts ingress and egress connections.", - "description": "Disable Ingress and Egress traffic on all pods wherever possible. It is recommended to define restrictive network policy on all new PODs, and then enable sources/destinations that this POD must communicate with.", - "score": 25 - }, - { - "guid": "", - "attributes": { - "armoBuiltin": true - }, - "id": "C-0044", - "controlID": "C-0044", - "name": "Container hostPort", - "ruleReports": [ - { - "name": "container-hostPort", - "remediation": "", - "ruleStatus": { - "status": "success", - "message": "" - }, - "ruleResponses": [ - { - "alertMessage": "Container: node-cache in DaemonSet: node-local-dns has Host-port", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 7, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"node-local-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"node-local-dns\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"nodelocaldns\",\"components.gke.io/component-version\":\"1.4.0\",\"prometheus.io/port\":\"9253\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"k8s-app\":\"node-local-dns\"}},\"spec\":{\"containers\":[{\"args\":[\"-localip\",\"169.254.20.10,10.72.0.10\",\"-conf\",\"/etc/Corefile\",\"-upstreamsvc\",\"kube-dns-upstream\",\"-kubednscm\",\"/etc/kube-dns\"],\"image\":\"gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1\",\"livenessProbe\":{\"httpGet\":{\"host\":\"169.254.20.10\",\"path\":\"/health\",\"port\":8080},\"initialDelaySeconds\":60,\"timeoutSeconds\":5},\"name\":\"node-cache\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"},{\"containerPort\":9253,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"25m\",\"memory\":\"5Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/etc/coredns\",\"name\":\"config-volume\"},{\"mountPath\":\"/etc/kube-dns\",\"name\":\"kube-dns-config\"}]}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"addon.gke.io/node-local-dns-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"node-local-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"},{\"configMap\":{\"items\":[{\"key\":\"Corefile\",\"path\":\"Corefile.base\"}],\"name\":\"node-local-dns\"},\"name\":\"config-volume\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"}}}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "node-local-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:host": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":9253,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/coredns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/kube-dns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:addon.gke.io/node-local-dns-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "53114241", - "uid": "5069e9ba-0784-41bf-9577-3757bcb3b6d6" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "node-local-dns" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "nodelocaldns", - "components.gke.io/component-version": "1.4.0", - "prometheus.io/port": "9253", - "prometheus.io/scrape": "true" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "node-local-dns" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-localip", - "169.254.20.10,10.72.0.10", - "-conf", - "/etc/Corefile", - "-upstreamsvc", - "kube-dns-upstream", - "-kubednscm", - "/etc/kube-dns" - ], - "image": "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "host": "169.254.20.10", - "path": "/health", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "node-cache", - "ports": [ - { - "containerPort": 53, - "hostPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "hostPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - }, - { - "containerPort": 9253, - "hostPort": 9253, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "25m", - "memory": "5Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/etc/coredns", - "name": "config-volume" - }, - { - "mountPath": "/etc/kube-dns", - "name": "kube-dns-config" - } - ] - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "addon.gke.io/node-local-dns-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "node-local-dns", - "serviceAccountName": "node-local-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "Corefile", - "path": "Corefile.base" - } - ], - "name": "node-local-dns" - }, - "name": "config-volume" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 2, - "updatedNumberScheduled": 7 - } - } - ] - } - } - ], - "listInputResources": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-audit\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-audit\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CONFIG_FILES\",\"value\":\"/config/config.json\"},{\"name\":\"CA_SERVER_TYPE\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"cluster_kind\",\"name\":\"ca-audit\"}}}],\"image\":\"quay.io/armosec/k8s-ca-auditlog-ubi:21\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-audit\",\"ports\":[{\"containerPort\":443,\"name\":\"ca-audit-port\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/config\",\"name\":\"ca-audit\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-audit\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"config\",\"path\":\"config.json\"}],\"name\":\"ca-audit\"},\"name\":\"ca-audit\"},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:54Z", - "generation": 1, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CONFIG_FILES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_SERVER_TYPE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:54Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-audit", - "namespace": "cyberarmor-system", - "resourceVersion": "60787209", - "uid": "687f52ea-6956-4e8a-bb8c-7ea35a04b3f0" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-audit" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CONFIG_FILES", - "value": "/config/config.json" - }, - { - "name": "CA_SERVER_TYPE", - "valueFrom": { - "configMapKeyRef": { - "key": "cluster_kind", - "name": "ca-audit" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-auditlog-ubi:21", - "imagePullPolicy": "Always", - "name": "ca-audit", - "ports": [ - { - "containerPort": 443, - "name": "ca-audit-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/config", - "name": "ca-audit", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-audit", - "serviceAccountName": "ca-audit", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "config", - "path": "config.json" - } - ], - "name": "ca-audit" - }, - "name": "ca-audit" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:54Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-audit-c667df747\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-dashboard-aggregator\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-dashboard-aggregator\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-configtype=1\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-dashboard-aggregator\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"40Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:55Z", - "generation": 1, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-dashboard-aggregator\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:55Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T23:55:20Z" - } - ], - "name": "ca-dashboard-aggregator", - "namespace": "cyberarmor-system", - "resourceVersion": "61250607", - "uid": "0ba23569-e254-4388-b22f-30cc1eca031b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-dashboard-aggregator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-configtype=1", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173", - "imagePullPolicy": "Always", - "name": "ca-dashboard-aggregator", - "resources": { - "limits": { - "cpu": "200m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "40Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:18:55Z", - "lastUpdateTime": "2021-10-12T00:19:19Z", - "message": "ReplicaSet \"ca-dashboard-aggregator-5b8bdbc8f5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-12T23:55:20Z", - "lastUpdateTime": "2021-10-12T23:55:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-notification-server\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-notification-server\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"maserNotificationServer\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\",\"value\":\"customerGUID\"},{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\",\"value\":\"8001\"},{\"name\":\"CA_NOTIFICATION_SERVER_PORT\",\"value\":\"8002\"}],\"image\":\"quay.io/armosec/notification-server-ubi:89\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-notification-server\",\"ports\":[{\"containerPort\":8001,\"name\":\"websocket\"},{\"containerPort\":8002,\"name\":\"rest-api\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:59Z", - "generation": 1, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-notification-server\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8001,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:59Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:11Z" - } - ], - "name": "ca-notification-server", - "namespace": "cyberarmor-system", - "resourceVersion": "60787036", - "uid": "8c3dc6fe-e730-4364-8445-dc5a05ad2b0f" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-notification-server" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_HOST", - "valueFrom": { - "configMapKeyRef": { - "key": "maserNotificationServer", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_ATTRIBUTES", - "value": "customerGUID" - }, - { - "name": "CA_NOTIFICATION_SERVER_WS_PORT", - "value": "8001" - }, - { - "name": "CA_NOTIFICATION_SERVER_PORT", - "value": "8002" - } - ], - "image": "quay.io/armosec/notification-server-ubi:89", - "imagePullPolicy": "Always", - "name": "ca-notification-server", - "ports": [ - { - "containerPort": 8001, - "name": "websocket", - "protocol": "TCP" - }, - { - "containerPort": 8002, - "name": "rest-api", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "50Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:11Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:59Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "ReplicaSet \"ca-notification-server-6fd966c875\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-ocimage\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-ocimage\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-ocimage:63\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-ocimage\",\"ports\":[{\"containerPort\":8080,\"name\":\"ca-ocimage-port\"}],\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:51Z", - "generation": 1, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-ocimage\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:04Z" - } - ], - "name": "ca-ocimage", - "namespace": "cyberarmor-system", - "resourceVersion": "60786986", - "uid": "a6d37edf-b144-4677-91b3-73c73d9c7df6" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-ocimage" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-ocimage:63", - "imagePullPolicy": "Always", - "name": "ca-ocimage", - "ports": [ - { - "containerPort": 8080, - "name": "ca-ocimage-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "1", - "memory": "1000Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:04Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:51Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "ReplicaSet \"ca-ocimage-5576ff7d7d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-oracle\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-oracle\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_ORACLE_PORT\",\"value\":\"4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8002\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-oracle-ubi:11\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-oracle\",\"ports\":[{\"containerPort\":4000,\"name\":\"ca-oracle\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:19:01Z", - "generation": 1, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-oracle\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:19:01Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-oracle", - "namespace": "cyberarmor-system", - "resourceVersion": "60787203", - "uid": "da3dd21c-bf13-4d2a-97da-ca80b94d08d3" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-oracle" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_ORACLE_PORT", - "value": "4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8002" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-oracle-ubi:11", - "imagePullPolicy": "Always", - "name": "ca-oracle", - "ports": [ - { - "containerPort": 4000, - "name": "ca-oracle", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:19:01Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-oracle-6c98c6bdbf\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-posture\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-posture\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8001\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-posture-ubi:112\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-posture\",\"ports\":[{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/resources/config\",\"name\":\"ca-posture-score-config\",\"readOnly\":false},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"},{\"configMap\":{\"items\":[{\"key\":\"resourcesdict.json\",\"path\":\"resourcesdict.json\"},{\"key\":\"frameworkdict.json\",\"path\":\"frameworkdict.json\"}],\"name\":\"ca-posture-score-config\"},\"name\":\"ca-posture-score-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:58Z", - "generation": 1, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-posture\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/resources/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-posture-score-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:58Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:45Z" - } - ], - "name": "ca-posture", - "namespace": "cyberarmor-system", - "resourceVersion": "60787259", - "uid": "f41f4dc1-cfb0-4201-bca7-f1cf0b72b6b7" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-posture" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8001" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-posture-ubi:112", - "imagePullPolicy": "Always", - "name": "ca-posture", - "ports": [ - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "500m", - "memory": "100Mi" - }, - "requests": { - "cpu": "100m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/resources/config", - "name": "ca-posture-score-config" - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "resourcesdict.json", - "path": "resourcesdict.json" - }, - { - "key": "frameworkdict.json", - "path": "frameworkdict.json" - } - ], - "name": "ca-posture-score-config" - }, - "name": "ca-posture-score-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:45Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:58Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "ReplicaSet \"ca-posture-5996968d7b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-rbac\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-rbac\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"S3_BUCKET\",\"value\":\"ca-kubernetes-rbac-db-dev\"},{\"name\":\"AWS_REGION\",\"value\":\"eu-west-1\"},{\"name\":\"AWS_ACCESS_KEY_ID\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keyid\",\"name\":\"ca-rbac\"}}},{\"name\":\"AWS_SECRET_ACCESS_KEY\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keysecret\",\"name\":\"ca-rbac\"}}}],\"image\":\"quay.io/armosec/k8s-ca-rbac-scanner-ubi:20\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-rbac\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"400Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:50Z", - "generation": 1, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-rbac\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AWS_ACCESS_KEY_ID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"AWS_REGION\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"AWS_SECRET_ACCESS_KEY\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"S3_BUCKET\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:13Z" - } - ], - "name": "ca-rbac", - "namespace": "cyberarmor-system", - "resourceVersion": "60787051", - "uid": "d5898a09-2489-4254-b210-0725ddb2427a" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-rbac" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "S3_BUCKET", - "value": "ca-kubernetes-rbac-db-dev" - }, - { - "name": "AWS_REGION", - "value": "eu-west-1" - }, - { - "name": "AWS_ACCESS_KEY_ID", - "valueFrom": { - "secretKeyRef": { - "key": "keyid", - "name": "ca-rbac" - } - } - }, - { - "name": "AWS_SECRET_ACCESS_KEY", - "valueFrom": { - "secretKeyRef": { - "key": "keysecret", - "name": "ca-rbac" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-rbac-scanner-ubi:20", - "imagePullPolicy": "Always", - "name": "ca-rbac", - "resources": { - "limits": { - "cpu": "200m", - "memory": "400Mi" - }, - "requests": { - "cpu": "10m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:13Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:50Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "ReplicaSet \"ca-rbac-75c8cfd6b4\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-vuln-scan\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-vuln-scan\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"EVENT_RECEIVER_URL\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\",\"value\":\"4\"}],\"image\":\"quay.io/armosec/k8s-ca-vuln-scan-ubi:84\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-vuln-scan\",\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1.5Gi\"},\"requests\":{\"cpu\":\"500m\",\"memory\":\"1Gi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:47Z", - "generation": 1, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-vuln-scan\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EVENT_RECEIVER_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:00Z" - } - ], - "name": "ca-vuln-scan", - "namespace": "cyberarmor-system", - "resourceVersion": "60786938", - "uid": "9ea3d6cb-c6c0-423f-aab2-630827939285" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-vuln-scan" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "EVENT_RECEIVER_URL", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_MAX_VULN_SCAN_ROUTINS", - "value": "4" - } - ], - "image": "quay.io/armosec/k8s-ca-vuln-scan-ubi:84", - "imagePullPolicy": "Always", - "name": "ca-vuln-scan", - "resources": { - "limits": { - "cpu": "1", - "memory": "1536Mi" - }, - "requests": { - "cpu": "500m", - "memory": "1Gi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:00Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:47Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "ReplicaSet \"ca-vuln-scan-75b499df8c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-webhook\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-webhook\"}},\"template\":{\"metadata\":{\"annotations\":{\"certificate\":\"d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt\"},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-tlsCertFile=/etc/webhook/certs/tls.crt\",\"-tlsKeyFile=/etc/webhook/certs/tls.key\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_WEBHOOK_NAME\",\"value\":\"ca-webhook\"},{\"name\":\"CA_WEBHOOK_PORT\",\"value\":\"443\"},{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_LOGIN_SECRET_NAME\",\"value\":\"ca-login\"},{\"name\":\"CA_ORACLE_SERVER\",\"value\":\"http://ca-oracle:4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"http://ca-notification-server:8001\"},{\"name\":\"CA_OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-webhook-ubi:606\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-webhook\",\"ports\":[{\"containerPort\":443,\"name\":\"mutating-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"600Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"100Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/cazips\",\"name\":\"zip-download\"},{\"mountPath\":\"/etc/webhook/certs\",\"name\":\"ca-cluster-certificate\",\"readOnly\":true},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"emptyDir\":{},\"name\":\"zip-download\"},{\"name\":\"ca-cluster-certificate\",\"secret\":{\"secretName\":\"ca-cluster-certificate\"}},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:46Z", - "generation": 1, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:certificate": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-webhook\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_LOGIN_SECRET_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/cazips\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/webhook/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-cluster-certificate\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"zip-download\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:16Z" - } - ], - "name": "ca-webhook", - "namespace": "cyberarmor-system", - "resourceVersion": "60787072", - "uid": "c968fe90-8480-471f-bdf1-fa98447ce1d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-webhook" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "certificate": "d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt" - }, - "creationTimestamp": null, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-tlsCertFile=/etc/webhook/certs/tls.crt", - "-tlsKeyFile=/etc/webhook/certs/tls.key", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_WEBHOOK_NAME", - "value": "ca-webhook" - }, - { - "name": "CA_WEBHOOK_PORT", - "value": "443" - }, - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_LOGIN_SECRET_NAME", - "value": "ca-login" - }, - { - "name": "CA_ORACLE_SERVER", - "value": "http://ca-oracle:4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "http://ca-notification-server:8001" - }, - { - "name": "CA_OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-webhook-ubi:606", - "imagePullPolicy": "Always", - "name": "ca-webhook", - "ports": [ - { - "containerPort": 443, - "name": "mutating-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "600Mi" - }, - "requests": { - "cpu": "300m", - "memory": "100Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/cazips", - "name": "zip-download" - }, - { - "mountPath": "/etc/webhook/certs", - "name": "ca-cluster-certificate", - "readOnly": true - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "emptyDir": {}, - "name": "zip-download" - }, - { - "name": "ca-cluster-certificate", - "secret": { - "defaultMode": 420, - "secretName": "ca-cluster-certificate" - } - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:16Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:46Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "ReplicaSet \"ca-webhook-7dd8bbd798\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-websocket\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-websocket\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_VULN_SCAN_SCHEDULE\",\"value\":\"@every 11h\"},{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\",\"value\":\"@every 12h\"},{\"name\":\"CA_DEBUG_SIGNER\",\"value\":null}],\"image\":\"quay.io/armosec/k8s-ca-websocket-ubi:406\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-websocket\",\"ports\":[{\"containerPort\":4002,\"name\":\"trigger-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:43Z", - "generation": 1, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-websocket\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_DEBUG_SIGNER\"}": { - ".": {}, - "f:name": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_VULN_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:14Z" - } - ], - "name": "ca-websocket", - "namespace": "cyberarmor-system", - "resourceVersion": "60787065", - "uid": "914f30e9-d858-4945-9314-cbd3422ebaab" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-websocket" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_VULN_SCAN_SCHEDULE", - "value": "@every 11h" - }, - { - "name": "CA_POSTURE_SCAN_SCHEDULE", - "value": "@every 12h" - }, - { - "name": "CA_DEBUG_SIGNER" - } - ], - "image": "quay.io/armosec/k8s-ca-websocket-ubi:406", - "imagePullPolicy": "Always", - "name": "ca-websocket", - "ports": [ - { - "containerPort": 4002, - "name": "trigger-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "1000Mi" - }, - "requests": { - "cpu": "300m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:14Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:43Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "ReplicaSet \"ca-websocket-857758846f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"adservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"adservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"adservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/adservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"name\":\"server\",\"ports\":[{\"containerPort\":9555}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"180Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:51Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":9555,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:12Z" - } - ], - "name": "adservice", - "namespace": "hipster", - "resourceVersion": "61263240", - "uid": "368bea36-82be-4c28-8607-cf931a836185" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "adservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6415784d-d96b-4866-9c10-d571c8d8fd35", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:29", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-adservice" - }, - "creationTimestamp": null, - "labels": { - "app": "adservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/adservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 9555, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "300Mi" - }, - "requests": { - "cpu": "200m", - "memory": "180Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:24Z", - "lastUpdateTime": "2021-10-12T00:12:24Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:51Z", - "lastUpdateTime": "2021-10-13T00:28:12Z", - "message": "ReplicaSet \"adservice-7864446d5c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"cartservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"cartservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"cartservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"REDIS_ADDR\",\"value\":\"redis-cart:6379\"}],\"image\":\"gcr.io/google-samples/microservices-demo/cartservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15,\"periodSeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":7070}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:47Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"REDIS_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7070,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T09:40:08Z" - } - ], - "name": "cartservice", - "namespace": "hipster", - "resourceVersion": "61443544", - "uid": "df767287-ffc1-4559-b7fd-32b09bf6208c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "cartservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "7ced7c5c-c483-40b3-b6bc-8829339dc3e1", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:04", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-cartservice" - }, - "creationTimestamp": null, - "labels": { - "app": "cartservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "REDIS_ADDR", - "value": "redis-cart:6379" - } - ], - "image": "gcr.io/google-samples/microservices-demo/cartservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7070, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "128Mi" - }, - "requests": { - "cpu": "200m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-13T00:27:35Z", - "message": "ReplicaSet \"cartservice-7c8f8f9ddd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T09:40:08Z", - "lastUpdateTime": "2021-10-13T09:40:08Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"checkoutservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"checkoutservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"checkoutservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"5050\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"PAYMENT_SERVICE_ADDR\",\"value\":\"paymentservice:50051\"},{\"name\":\"EMAIL_SERVICE_ADDR\",\"value\":\"emailservice:5000\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"}],\"image\":\"gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":5050}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:42Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EMAIL_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PAYMENT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":5050,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:42Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:41Z" - } - ], - "name": "checkoutservice", - "namespace": "hipster", - "resourceVersion": "61262985", - "uid": "b5e6a8d8-1ec6-4acc-bf14-e3bb28bff284" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "checkoutservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "bebad8bb-8728-4813-ae19-d22a38a289a5", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:28", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-checkoutservice" - }, - "creationTimestamp": null, - "labels": { - "app": "checkoutservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "5050" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "PAYMENT_SERVICE_ADDR", - "value": "paymentservice:50051" - }, - { - "name": "EMAIL_SERVICE_ADDR", - "value": "emailservice:5000" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - } - ], - "image": "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 5050, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T14:05:32Z", - "lastUpdateTime": "2021-10-12T14:05:32Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:42Z", - "lastUpdateTime": "2021-10-13T00:27:42Z", - "message": "ReplicaSet \"checkoutservice-86c564466c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"currencyservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"currencyservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"currencyservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"7000\"}],\"image\":\"gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":7000,\"name\":\"grpc\"}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T08:37:54Z" - } - ], - "name": "currencyservice", - "namespace": "hipster", - "resourceVersion": "61423238", - "uid": "167b75e1-1be2-4764-aaad-dbb1ae248d3c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "currencyservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "4aa34494-0348-4859-9e29-56df9baf52ba", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-currencyservice" - }, - "creationTimestamp": null, - "labels": { - "app": "currencyservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "7000" - } - ], - "image": "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7000, - "name": "grpc", - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:29:19Z", - "message": "ReplicaSet \"currencyservice-544b6d849c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T08:37:54Z", - "lastUpdateTime": "2021-10-13T08:37:54Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"emailservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"emailservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"emailservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"DISABLE_PROFILER\",\"value\":\"1\"}],\"image\":\"gcr.io/google-samples/microservices-demo/emailservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:41Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"DISABLE_PROFILER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:41Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:07Z" - } - ], - "name": "emailservice", - "namespace": "hipster", - "resourceVersion": "61263204", - "uid": "9959433f-c964-4e6d-a2d7-3d1b9b617948" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "emailservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "e8aa9826-2367-44e1-9aad-a6d617b0fa06", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:48", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-emailservice" - }, - "creationTimestamp": null, - "labels": { - "app": "emailservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "DISABLE_PROFILER", - "value": "1" - } - ], - "image": "gcr.io/google-samples/microservices-demo/emailservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-12T00:11:47Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:41Z", - "lastUpdateTime": "2021-10-13T00:28:08Z", - "message": "ReplicaSet \"emailservice-cc7c4cd87\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"frontend\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"frontend\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"frontend\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"},{\"name\":\"RECOMMENDATION_SERVICE_ADDR\",\"value\":\"recommendationservice:8080\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"CHECKOUT_SERVICE_ADDR\",\"value\":\"checkoutservice:5050\"},{\"name\":\"AD_SERVICE_ADDR\",\"value\":\"adservice:9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/frontend:v0.2.3\",\"livenessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-liveness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-readiness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:44Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AD_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CHECKOUT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"RECOMMENDATION_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:44Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:34Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:22Z" - } - ], - "name": "frontend", - "namespace": "hipster", - "resourceVersion": "61263336", - "uid": "86b92d9e-22ad-4f0a-be26-41343f05f0d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "frontend" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9611f05f-4a8b-48ff-9722-e6a2ec702d65", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:57", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-frontend", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "frontend", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - }, - { - "name": "RECOMMENDATION_SERVICE_ADDR", - "value": "recommendationservice:8080" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "CHECKOUT_SERVICE_ADDR", - "value": "checkoutservice:5050" - }, - { - "name": "AD_SERVICE_ADDR", - "value": "adservice:9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/frontend:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-liveness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-readiness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:04Z", - "lastUpdateTime": "2021-10-12T00:12:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:44Z", - "lastUpdateTime": "2021-10-13T00:28:23Z", - "message": "ReplicaSet \"frontend-c747f6f47\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"loadgenerator\",\"namespace\":\"hipster\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"loadgenerator\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"loadgenerator\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"FRONTEND_ADDR\",\"value\":\"frontend:80\"},{\"name\":\"USERS\",\"value\":\"10\"}],\"image\":\"gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3\",\"name\":\"main\",\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"256Mi\"}}}],\"restartPolicy\":\"Always\",\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"main\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"FRONTEND_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"USERS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:38Z" - } - ], - "name": "loadgenerator", - "namespace": "hipster", - "resourceVersion": "61263451", - "uid": "e9200650-d25d-43f2-b1bc-4615beaed50c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "loadgenerator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "baca3d0f-fdc8-42c6-a9b1-ee29b3d173e0", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:26", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-loadgenerator", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "loadgenerator", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "FRONTEND_ADDR", - "value": "frontend:80" - }, - { - "name": "USERS", - "value": "10" - } - ], - "image": "gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "name": "main", - "resources": { - "limits": { - "cpu": "500m", - "memory": "512Mi" - }, - "requests": { - "cpu": "300m", - "memory": "256Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-13T00:24:15Z", - "lastUpdateTime": "2021-10-13T00:24:15Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:28:38Z", - "message": "ReplicaSet \"loadgenerator-6dcb6ffc4f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"paymentservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"paymentservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"paymentservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:45Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:45Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:29:27Z" - } - ], - "name": "paymentservice", - "namespace": "hipster", - "resourceVersion": "61263785", - "uid": "ab21c30f-d153-4ea8-982e-e12a71745dae" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "paymentservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "60b5720d-99b5-47a0-8bc4-656b372a6d17", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:52", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-paymentservice" - }, - "creationTimestamp": null, - "labels": { - "app": "paymentservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:45Z", - "lastUpdateTime": "2021-10-13T00:29:27Z", - "message": "ReplicaSet \"paymentservice-849b876ffd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"productcatalogservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"productcatalogservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"productcatalogservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":3550}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:46Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":3550,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:57Z" - } - ], - "name": "productcatalogservice", - "namespace": "hipster", - "resourceVersion": "61263117", - "uid": "50b29b6e-0f97-43b8-9555-a53d9c0e18f9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "productcatalogservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9bb4cc06-3907-401b-919f-c2974a623068", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-productcatalogservice" - }, - "creationTimestamp": null, - "labels": { - "app": "productcatalogservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 3550, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:46Z", - "lastUpdateTime": "2021-10-13T00:27:57Z", - "message": "ReplicaSet \"productcatalogservice-586fd876d5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"recommendationservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"recommendationservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"recommendationservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"450Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"220Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:43Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:37Z" - } - ], - "name": "recommendationservice", - "namespace": "hipster", - "resourceVersion": "61263443", - "uid": "00437f28-24c4-4759-ab93-f0be948eabc9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "recommendationservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "8cace306-b3ce-4f2f-8a6f-b122873b4eee", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-recommendationservice" - }, - "creationTimestamp": null, - "labels": { - "app": "recommendationservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "450Mi" - }, - "requests": { - "cpu": "100m", - "memory": "220Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-12T00:11:50Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:43Z", - "lastUpdateTime": "2021-10-13T00:28:37Z", - "message": "ReplicaSet \"recommendationservice-54b7b7b95d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"redis-cart\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"redis-cart\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"redis-cart\"}},\"spec\":{\"containers\":[{\"image\":\"redis:alpine\",\"livenessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"name\":\"redis\",\"ports\":[{\"containerPort\":6379}],\"readinessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"resources\":{\"limits\":{\"cpu\":\"125m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"70m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/data\",\"name\":\"redis-data\"}]}],\"volumes\":[{\"emptyDir\":{},\"name\":\"redis-data\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:50Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"redis\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":6379,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/data\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"redis-data\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:38Z" - } - ], - "name": "redis-cart", - "namespace": "hipster", - "resourceVersion": "61262948", - "uid": "76b3aebb-9ec5-479e-81ae-975ccf1bc6ec" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "redis-cart" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "838a7c21-618b-4693-a13b-838a9231ca58", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-redis-cart" - }, - "creationTimestamp": null, - "labels": { - "app": "redis-cart", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "image": "redis:alpine", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "name": "redis", - "ports": [ - { - "containerPort": 6379, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "125m", - "memory": "256Mi" - }, - "requests": { - "cpu": "70m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/data", - "name": "redis-data" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "emptyDir": {}, - "name": "redis-data" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:57Z", - "lastUpdateTime": "2021-10-12T00:11:57Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-13T00:27:38Z", - "message": "ReplicaSet \"redis-cart-594778c8b9\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"shippingservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"shippingservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"shippingservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:49Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:49Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:11Z" - } - ], - "name": "shippingservice", - "namespace": "hipster", - "resourceVersion": "61262726", - "uid": "febd2fe5-0e28-448e-aabd-31904ebb82a9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "shippingservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6503b850-839c-4b73-95ab-195d27b3c10d", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:26:58", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-shippingservice" - }, - "creationTimestamp": null, - "labels": { - "app": "shippingservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:00Z", - "lastUpdateTime": "2021-10-12T00:12:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:49Z", - "lastUpdateTime": "2021-10-13T00:27:11Z", - "message": "ReplicaSet \"shippingservice-758c9b4d4b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":\"10%\",\"maxUnavailable\":0}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"kubedns\",\"prometheus.io/port\":\"10054\",\"prometheus.io/scrape\":\"true\",\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"labels\":{\"k8s-app\":\"kube-dns\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchExpressions\":[{\"key\":\"k8s-app\",\"operator\":\"In\",\"values\":[\"kube-dns\"]}]},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"--domain=cluster.local.\",\"--dns-port=10053\",\"--config-dir=/kube-dns-config\",\"--v=2\"],\"env\":[{\"name\":\"PROMETHEUS_PORT\",\"value\":\"10055\"}],\"image\":\"gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/kubedns\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"kubedns\",\"ports\":[{\"containerPort\":10053,\"name\":\"dns-local\",\"protocol\":\"UDP\"},{\"containerPort\":10053,\"name\":\"dns-tcp-local\",\"protocol\":\"TCP\"},{\"containerPort\":10055,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readiness\",\"port\":8081,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":3,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"memory\":\"210Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"70Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001},\"volumeMounts\":[{\"mountPath\":\"/kube-dns-config\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"-v=2\",\"-logtostderr\",\"-configDir=/etc/k8s/dns/dnsmasq-nanny\",\"-restartDnsmasq=true\",\"--\",\"-k\",\"--cache-size=1000\",\"--no-negcache\",\"--dns-forward-max=1500\",\"--log-facility=-\",\"--server=/cluster.local/127.0.0.1#10053\",\"--server=/in-addr.arpa/127.0.0.1#10053\",\"--server=/ip6.arpa/127.0.0.1#10053\"],\"image\":\"gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/dnsmasq\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"dnsmasq\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"150m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"capabilities\":{\"add\":[\"NET_BIND_SERVICE\",\"SETGID\"],\"drop\":[\"all\"]}},\"volumeMounts\":[{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"--v=2\",\"--logtostderr\",\"--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV\",\"--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV\"],\"image\":\"gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/metrics\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"sidecar\",\"ports\":[{\"containerPort\":10054,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001}}],\"dnsPolicy\":\"Default\",\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 4, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:scheduler.alpha.kubernetes.io/critical-pod": {}, - "f:seccomp.security.alpha.kubernetes.io/pod": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:podAntiAffinity": { - ".": {}, - "f:preferredDuringSchedulingIgnoredDuringExecution": {} - } - }, - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:capabilities": { - ".": {}, - "f:add": {}, - "f:drop": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"kubedns\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PROMETHEUS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10053,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10053,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10055,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/kube-dns-config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"sidecar\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10054,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - "f:image": {} - }, - "k:{\"name\":\"kubedns\"}": { - "f:image": {} - }, - "k:{\"name\":\"sidecar\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:06:26Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "53109905", - "uid": "cd5cca24-7cd2-4548-a5d3-d90beb79f9e8" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 2, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "10%", - "maxUnavailable": 0 - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "kubedns", - "prometheus.io/port": "10054", - "prometheus.io/scrape": "true", - "scheduler.alpha.kubernetes.io/critical-pod": "", - "seccomp.security.alpha.kubernetes.io/pod": "runtime/default" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns" - } - }, - "spec": { - "affinity": { - "podAntiAffinity": { - "preferredDuringSchedulingIgnoredDuringExecution": [ - { - "podAffinityTerm": { - "labelSelector": { - "matchExpressions": [ - { - "key": "k8s-app", - "operator": "In", - "values": [ - "kube-dns" - ] - } - ] - }, - "topologyKey": "kubernetes.io/hostname" - }, - "weight": 100 - } - ] - } - }, - "containers": [ - { - "args": [ - "--domain=cluster.local.", - "--dns-port=10053", - "--config-dir=/kube-dns-config", - "--v=2" - ], - "env": [ - { - "name": "PROMETHEUS_PORT", - "value": "10055" - } - ], - "image": "gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/kubedns", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "kubedns", - "ports": [ - { - "containerPort": 10053, - "name": "dns-local", - "protocol": "UDP" - }, - { - "containerPort": 10053, - "name": "dns-tcp-local", - "protocol": "TCP" - }, - { - "containerPort": 10055, - "name": "metrics", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/readiness", - "port": 8081, - "scheme": "HTTP" - }, - "initialDelaySeconds": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "resources": { - "limits": { - "memory": "210Mi" - }, - "requests": { - "cpu": "100m", - "memory": "70Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/kube-dns-config", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "-v=2", - "-logtostderr", - "-configDir=/etc/k8s/dns/dnsmasq-nanny", - "-restartDnsmasq=true", - "--", - "-k", - "--cache-size=1000", - "--no-negcache", - "--dns-forward-max=1500", - "--log-facility=-", - "--server=/cluster.local/127.0.0.1#10053", - "--server=/in-addr.arpa/127.0.0.1#10053", - "--server=/ip6.arpa/127.0.0.1#10053" - ], - "image": "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/dnsmasq", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "dnsmasq", - "ports": [ - { - "containerPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "150m", - "memory": "20Mi" - } - }, - "securityContext": { - "capabilities": { - "add": [ - "NET_BIND_SERVICE", - "SETGID" - ], - "drop": [ - "all" - ] - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/k8s/dns/dnsmasq-nanny", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "--v=2", - "--logtostderr", - "--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV", - "--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV" - ], - "image": "gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/metrics", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "sidecar", - "ports": [ - { - "containerPort": 10054, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns", - "serviceAccountName": "kube-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 2, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-09-11T01:57:38Z", - "message": "ReplicaSet \"kube-dns-59844ff879\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:06:26Z", - "lastUpdateTime": "2021-09-25T17:06:26Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 4, - "readyReplicas": 2, - "replicas": 2, - "updatedReplicas": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns-autoscaler\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns-autoscaler\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"spec\":{\"containers\":[{\"command\":[\"/cluster-proportional-autoscaler\",\"--namespace=kube-system\",\"--configmap=kube-dns-autoscaler\",\"--target=Deployment/kube-dns\",\"--default-params={\\\"linear\\\":{\\\"coresPerReplica\\\":256,\\\"nodesPerReplica\\\":16,\\\"preventSinglePointFailure\\\":true,\\\"includeUnschedulableNodes\\\":true}}\",\"--logtostderr=true\",\"--v=2\"],\"image\":\"gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0\",\"name\":\"autoscaler\",\"resources\":{\"requests\":{\"cpu\":\"20m\",\"memory\":\"10Mi\"}}}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"seccompProfile\":{\"type\":\"RuntimeDefault\"},\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns-autoscaler\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns-autoscaler", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"autoscaler\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:02:52Z" - } - ], - "name": "kube-dns-autoscaler", - "namespace": "kube-system", - "resourceVersion": "53108562", - "uid": "c84ce079-f3c8-46ba-871f-0f2d42ffee1e" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/cluster-proportional-autoscaler", - "--namespace=kube-system", - "--configmap=kube-dns-autoscaler", - "--target=Deployment/kube-dns", - "--default-params={\"linear\":{\"coresPerReplica\":256,\"nodesPerReplica\":16,\"preventSinglePointFailure\":true,\"includeUnschedulableNodes\":true}}", - "--logtostderr=true", - "--v=2" - ], - "image": "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "autoscaler", - "resources": { - "requests": { - "cpu": "20m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "seccompProfile": { - "type": "RuntimeDefault" - }, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns-autoscaler", - "serviceAccountName": "kube-dns-autoscaler", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:54:39Z", - "message": "ReplicaSet \"kube-dns-autoscaler-844c9d9448\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:02:52Z", - "lastUpdateTime": "2021-09-25T17:02:52Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"glbc\",\"kubernetes.io/cluster-service\":\"true\",\"kubernetes.io/name\":\"GLBC\"},\"name\":\"l7-default-backend\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"glbc\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"glbc\",\"name\":\"glbc\"}},\"spec\":{\"containers\":[{\"image\":\"k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":30,\"timeoutSeconds\":5},\"name\":\"default-http-backend\",\"ports\":[{\"containerPort\":8080}],\"resources\":{\"limits\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}}}],\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"tolerations\":[{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "glbc", - "kubernetes.io/cluster-service": "true", - "kubernetes.io/name": "GLBC" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:kubernetes.io/name": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:name": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"default-http-backend\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:seccompProfile": { - "f:type": {} - } - }, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:01:20Z" - } - ], - "name": "l7-default-backend", - "namespace": "kube-system", - "resourceVersion": "53107969", - "uid": "32a76c03-37a1-44e9-b293-dd6b46ed274b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "glbc" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "glbc", - "name": "glbc" - } - }, - "spec": { - "containers": [ - { - "image": "k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 30, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "default-http-backend", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "10m", - "memory": "20Mi" - }, - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:56:25Z", - "message": "ReplicaSet \"l7-default-backend-56cb9644f6\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:01:20Z", - "lastUpdateTime": "2021-09-25T17:01:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "24", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metrics-server\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server-v0.3.6\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server\"},\"spec\":{\"containers\":[{\"command\":[\"/metrics-server\",\"--metric-resolution=30s\",\"--kubelet-port=10255\",\"--deprecated-kubelet-completely-insecure=true\",\"--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP\"],\"image\":\"k8s.gcr.io/metrics-server-amd64:v0.3.6\",\"name\":\"metrics-server\",\"ports\":[{\"containerPort\":443,\"name\":\"https\",\"protocol\":\"TCP\"}]},{\"command\":[\"/pod_nanny\",\"--config-dir=/etc/config\",\"--cpu=40m\",\"--extra-cpu=0.5m\",\"--memory=35Mi\",\"--extra-memory=4Mi\",\"--threshold=5\",\"--deployment=metrics-server-v0.3.6\",\"--container=metrics-server\",\"--poll-period=300000\",\"--estimator=exponential\",\"--scale-down-delay=24h\",\"--minClusterSize=5\",\"--use-metrics=true\"],\"env\":[{\"name\":\"MY_POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"MY_POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"gke.gcr.io/addon-resizer:1.8.11-gke.0\",\"name\":\"metrics-server-nanny\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"5m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"metrics-server-config-volume\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"metrics-server\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"metrics-server-config\"},\"name\":\"metrics-server-config-volume\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 24, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metrics-server", - "kubernetes.io/cluster-service": "true", - "version": "v0.3.6" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:version": {} - }, - "f:name": {} - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - }, - "k:{\"name\":\"metrics-server-nanny\"}": { - ".": {}, - "f:command": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"MY_POD_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"MY_POD_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"metrics-server-config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - "f:resources": { - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - } - } - } - } - } - } - }, - "manager": "pod_nanny", - "operation": "Update", - "time": "2021-06-13T13:42:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-26T17:13:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-26T17:13:52Z" - } - ], - "name": "metrics-server-v0.3.6", - "namespace": "kube-system", - "resourceVersion": "53582788", - "uid": "872d0f34-7998-45d3-9eea-570e0a47e03c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - }, - "name": "metrics-server" - }, - "spec": { - "containers": [ - { - "command": [ - "/metrics-server", - "--metric-resolution=30s", - "--kubelet-port=10255", - "--deprecated-kubelet-completely-insecure=true", - "--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP" - ], - "image": "k8s.gcr.io/metrics-server-amd64:v0.3.6", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server", - "ports": [ - { - "containerPort": 443, - "name": "https", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "44m", - "memory": "63Mi" - }, - "requests": { - "cpu": "44m", - "memory": "63Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - }, - { - "command": [ - "/pod_nanny", - "--config-dir=/etc/config", - "--cpu=40m", - "--extra-cpu=0.5m", - "--memory=35Mi", - "--extra-memory=4Mi", - "--threshold=5", - "--deployment=metrics-server-v0.3.6", - "--container=metrics-server", - "--poll-period=300000", - "--estimator=exponential", - "--scale-down-delay=24h", - "--minClusterSize=5", - "--use-metrics=true" - ], - "env": [ - { - "name": "MY_POD_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.name" - } - } - }, - { - "name": "MY_POD_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - } - ], - "image": "gke.gcr.io/addon-resizer:1.8.11-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server-nanny", - "resources": { - "limits": { - "cpu": "100m", - "memory": "300Mi" - }, - "requests": { - "cpu": "5m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "metrics-server-config-volume" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "serviceAccount": "metrics-server", - "serviceAccountName": "metrics-server", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "metrics-server-config" - }, - "name": "metrics-server-config-volume" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-09-25T17:12:33Z", - "lastUpdateTime": "2021-09-25T17:12:33Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-06-13T13:42:20Z", - "lastUpdateTime": "2021-09-26T17:13:52Z", - "message": "ReplicaSet \"metrics-server-v0.3.6-7889654bbb\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 24, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "6", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-proxy\"},\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-proxy\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-proxy\"}},\"spec\":{\"containers\":[{\"command\":[\"/bin/sh\",\"-c\",\"kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\\u003e\\u003e/var/log/kube-proxy.log 2\\u003e\\u00261\"],\"env\":[{\"name\":\"KUBERNETES_SERVICE_HOST\",\"value\":\"34.78.97.243\"}],\"image\":\"gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001\",\"name\":\"kube-proxy\",\"resources\":{\"requests\":{\"cpu\":\"100m\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/log\",\"name\":\"varlog\",\"readOnly\":false},{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/lib/modules\",\"name\":\"lib-modules\",\"readOnly\":true}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\",\"node.kubernetes.io/kube-proxy-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"kube-proxy\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/log\"},\"name\":\"varlog\"},{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"hostPath\":{\"path\":\"/lib/modules\"},\"name\":\"lib-modules\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "generation": 6, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-proxy" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBERNETES_SERVICE_HOST\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/kube-proxy-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - "f:command": {}, - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:44Z" - } - ], - "name": "kube-proxy", - "namespace": "kube-system", - "resourceVersion": "52161714", - "uid": "bb6f9ab0-e586-407b-95c0-773637c696e8" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-proxy" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-proxy" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "env": [ - { - "name": "KUBERNETES_SERVICE_HOST", - "value": "34.78.97.243" - } - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux", - "node.kubernetes.io/kube-proxy-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "kube-proxy", - "serviceAccountName": "kube-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 6 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"},\"name\":\"metadata-proxy-v0.1\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metadata-proxy\",\"version\":\"v0.1\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"}},\"spec\":{\"containers\":[{\"args\":[\"--addr=0.0.0.0:988\"],\"image\":\"k8s.gcr.io/metadata-proxy:v0.1.12\",\"name\":\"metadata-proxy\",\"resources\":{\"limits\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"},\"requests\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"}},\"securityContext\":{\"privileged\":true}}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"cloud.google.com/metadata-proxy-ready\":\"true\",\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"metadata-proxy\",\"terminationGracePeriodSeconds\":30,\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 3, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:cloud.google.com/metadata-proxy-ready": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - "f:args": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - } - ], - "name": "metadata-proxy-v0.1", - "namespace": "kube-system", - "resourceVersion": "25934435", - "uid": "94bf5845-f77b-47d4-bcec-e78549b4d8a3" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metadata-proxy", - "version": "v0.1" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--addr=0.0.0.0:988" - ], - "image": "k8s.gcr.io/metadata-proxy:v0.1.12", - "imagePullPolicy": "IfNotPresent", - "name": "metadata-proxy", - "resources": { - "limits": { - "cpu": "30m", - "memory": "25Mi" - }, - "requests": { - "cpu": "30m", - "memory": "25Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "cloud.google.com/metadata-proxy-ready": "true", - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "metadata-proxy", - "serviceAccountName": "metadata-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 3 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"node-local-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"node-local-dns\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"nodelocaldns\",\"components.gke.io/component-version\":\"1.4.0\",\"prometheus.io/port\":\"9253\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"k8s-app\":\"node-local-dns\"}},\"spec\":{\"containers\":[{\"args\":[\"-localip\",\"169.254.20.10,10.72.0.10\",\"-conf\",\"/etc/Corefile\",\"-upstreamsvc\",\"kube-dns-upstream\",\"-kubednscm\",\"/etc/kube-dns\"],\"image\":\"gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1\",\"livenessProbe\":{\"httpGet\":{\"host\":\"169.254.20.10\",\"path\":\"/health\",\"port\":8080},\"initialDelaySeconds\":60,\"timeoutSeconds\":5},\"name\":\"node-cache\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"},{\"containerPort\":9253,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"25m\",\"memory\":\"5Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/etc/coredns\",\"name\":\"config-volume\"},{\"mountPath\":\"/etc/kube-dns\",\"name\":\"kube-dns-config\"}]}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"addon.gke.io/node-local-dns-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"node-local-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"},{\"configMap\":{\"items\":[{\"key\":\"Corefile\",\"path\":\"Corefile.base\"}],\"name\":\"node-local-dns\"},\"name\":\"config-volume\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"}}}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "node-local-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:host": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":9253,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/coredns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/kube-dns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:addon.gke.io/node-local-dns-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "53114241", - "uid": "5069e9ba-0784-41bf-9577-3757bcb3b6d6" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "node-local-dns" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "nodelocaldns", - "components.gke.io/component-version": "1.4.0", - "prometheus.io/port": "9253", - "prometheus.io/scrape": "true" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "node-local-dns" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-localip", - "169.254.20.10,10.72.0.10", - "-conf", - "/etc/Corefile", - "-upstreamsvc", - "kube-dns-upstream", - "-kubednscm", - "/etc/kube-dns" - ], - "image": "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "host": "169.254.20.10", - "path": "/health", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "node-cache", - "ports": [ - { - "containerPort": 53, - "hostPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "hostPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - }, - { - "containerPort": 9253, - "hostPort": 9253, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "25m", - "memory": "5Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/etc/coredns", - "name": "config-volume" - }, - { - "mountPath": "/etc/kube-dns", - "name": "kube-dns-config" - } - ] - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "addon.gke.io/node-local-dns-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "node-local-dns", - "serviceAccountName": "node-local-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "Corefile", - "path": "Corefile.base" - } - ], - "name": "node-local-dns" - }, - "name": "config-volume" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 2, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"nvidia-gpu-device-plugin\"},\"name\":\"nvidia-gpu-device-plugin\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"cloud.google.com/gke-accelerator\",\"operator\":\"Exists\"}]}]}}},\"containers\":[{\"command\":[\"/usr/bin/nvidia-gpu-device-plugin\",\"-logtostderr\",\"--enable-container-gpu-metrics\",\"--enable-health-monitoring\"],\"env\":[{\"name\":\"LD_LIBRARY_PATH\",\"value\":\"/usr/local/nvidia/lib64\"}],\"image\":\"gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317\",\"name\":\"nvidia-gpu-device-plugin\",\"ports\":[{\"containerPort\":2112,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/device-plugin\",\"name\":\"device-plugin\"},{\"mountPath\":\"/dev\",\"name\":\"dev\"},{\"mountPath\":\"/usr/local/nvidia\",\"name\":\"nvidia\"},{\"mountPath\":\"/var/lib/kubelet/pod-resources\",\"name\":\"pod-resources\"},{\"mountPath\":\"/proc\",\"name\":\"proc\"},{\"mountPath\":\"/etc/nvidia\",\"name\":\"nvidia-config\"}]}],\"priorityClassName\":\"system-node-critical\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/device-plugins\"},\"name\":\"device-plugin\"},{\"hostPath\":{\"path\":\"/dev\"},\"name\":\"dev\"},{\"hostPath\":{\"path\":\"/home/kubernetes/bin/nvidia\",\"type\":\"Directory\"},\"name\":\"nvidia\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/pod-resources\"},\"name\":\"pod-resources\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"proc\"},{\"hostPath\":{\"path\":\"/etc/nvidia\"},\"name\":\"nvidia-config\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:17Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "nvidia-gpu-device-plugin" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:nodeAffinity": { - ".": {}, - "f:requiredDuringSchedulingIgnoredDuringExecution": { - ".": {}, - "f:nodeSelectorTerms": {} - } - } - }, - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"LD_LIBRARY_PATH\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":2112,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/device-plugin\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/local/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet/pod-resources\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"dev\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"device-plugin\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"nvidia\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"pod-resources\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - "f:command": {}, - "f:image": {}, - "f:volumeMounts": { - "k:{\"mountPath\":\"/etc/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/proc\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:volumes": { - "k:{\"name\":\"nvidia-config\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"proc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "nvidia-gpu-device-plugin", - "namespace": "kube-system", - "resourceVersion": "25934477", - "uid": "14396a20-ecee-4671-aefe-2a5b9d2e0dde" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "spec": { - "affinity": { - "nodeAffinity": { - "requiredDuringSchedulingIgnoredDuringExecution": { - "nodeSelectorTerms": [ - { - "matchExpressions": [ - { - "key": "cloud.google.com/gke-accelerator", - "operator": "Exists" - } - ] - } - ] - } - } - }, - "containers": [ - { - "command": [ - "/usr/bin/nvidia-gpu-device-plugin", - "-logtostderr", - "--enable-container-gpu-metrics", - "--enable-health-monitoring" - ], - "env": [ - { - "name": "LD_LIBRARY_PATH", - "value": "/usr/local/nvidia/lib64" - } - ], - "image": "gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317", - "imagePullPolicy": "IfNotPresent", - "name": "nvidia-gpu-device-plugin", - "ports": [ - { - "containerPort": 2112, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "20Mi" - }, - "requests": { - "cpu": "50m", - "memory": "20Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/device-plugin", - "name": "device-plugin" - }, - { - "mountPath": "/dev", - "name": "dev" - }, - { - "mountPath": "/usr/local/nvidia", - "name": "nvidia" - }, - { - "mountPath": "/var/lib/kubelet/pod-resources", - "name": "pod-resources" - }, - { - "mountPath": "/proc", - "name": "proc" - }, - { - "mountPath": "/etc/nvidia", - "name": "nvidia-config" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/device-plugins", - "type": "" - }, - "name": "device-plugin" - }, - { - "hostPath": { - "path": "/dev", - "type": "" - }, - "name": "dev" - }, - { - "hostPath": { - "path": "/home/kubernetes/bin/nvidia", - "type": "Directory" - }, - "name": "nvidia" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/pod-resources", - "type": "" - }, - "name": "pod-resources" - }, - { - "hostPath": { - "path": "/proc", - "type": "" - }, - "name": "proc" - }, - { - "hostPath": { - "path": "/etc/nvidia", - "type": "" - }, - "name": "nvidia-config" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:02:45.009201226Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:02:48Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"6de798cc-d558-479a-8ef4-38363e434633\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.63\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:02:55Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-5naq", - "uid": "6de798cc-d558-479a-8ef4-38363e434633" - } - ], - "resourceVersion": "53108585", - "uid": "fdd66d80-d09d-4b43-a291-b3797c7a5864" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-5naq", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://50767376b8a42b7a390e84c5c451d1485b1a562873b915100dc605bbcc49c1c5", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:02:48Z" - } - } - } - ], - "hostIP": "10.132.0.63", - "phase": "Running", - "podIP": "10.132.0.63", - "podIPs": [ - { - "ip": "10.132.0.63" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:02:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:09:05.595580038Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:09:09Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"d288c56c-2a00-42fe-b2ea-b8761fec2a4e\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.193\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:09:16Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-abj3", - "uid": "d288c56c-2a00-42fe-b2ea-b8761fec2a4e" - } - ], - "resourceVersion": "53110982", - "uid": "0866b060-d7a6-40bc-9ed9-292fbce958e9" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-abj3", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b04121a3de085254493b48dbe1be551abd021877d1c098afbd19e6429df8f4ba", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:09:08Z" - } - } - } - ], - "hostIP": "10.132.15.193", - "phase": "Running", - "podIP": "10.132.15.193", - "podIPs": [ - { - "ip": "10.132.15.193" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:09:06Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:56:27.195784979Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:56:29Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"9aa58d78-0147-4564-9900-0409a6bec341\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.61\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:56:37Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-enr8", - "uid": "9aa58d78-0147-4564-9900-0409a6bec341" - } - ], - "resourceVersion": "53106105", - "uid": "b940e7b5-9e7f-4ac7-a3ee-6c6655c1e65a" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-enr8", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b9375aed4bc463ecfa5fcfb0cfb3b55d087416bfe0c3267c1395e8f93569d03c", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:56:29Z" - } - } - } - ], - "hostIP": "10.132.0.61", - "phase": "Running", - "podIP": "10.132.0.61", - "podIPs": [ - { - "ip": "10.132.0.61" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:56:28Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:59:41.285621877Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:59:44Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"c1ab3c15-9764-40f5-ba6b-82556dc98ea2\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.62\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:59:52Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-oq2w", - "uid": "c1ab3c15-9764-40f5-ba6b-82556dc98ea2" - } - ], - "resourceVersion": "53107378", - "uid": "19e52dea-6339-4ed7-8e32-3d39b242d133" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-oq2w", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://a0b27bef16953a38c48075124547583280bccf28d1d6cf54c3b3e754e2847c86", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:59:44Z" - } - } - } - ], - "hostIP": "10.132.0.62", - "phase": "Running", - "podIP": "10.132.0.62", - "podIPs": [ - { - "ip": "10.132.0.62" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:59:42Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:12:12.095932889Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:12:15Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"7042c0e8-8dc5-4d1d-8b36-92c692c31c76\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.194\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:12:22Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-rgdp", - "uid": "7042c0e8-8dc5-4d1d-8b36-92c692c31c76" - } - ], - "resourceVersion": "53112149", - "uid": "5248c280-7bde-4fe9-a74e-56ae25abb0d2" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-rgdp", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://fd91ae480585a78c59ef401dc852d58921e76693ecbd908d98e4b63da6c298ff", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:12:14Z" - } - } - } - ], - "hostIP": "10.132.15.194", - "phase": "Running", - "podIP": "10.132.15.194", - "podIPs": [ - { - "ip": "10.132.15.194" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:12:13Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:05:45.558688986Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:05:49Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"a58f61e7-9d9e-4266-90d4-16b9969cb373\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.192\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:05:56Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-x940", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-x940", - "uid": "a58f61e7-9d9e-4266-90d4-16b9969cb373" - } - ], - "resourceVersion": "53109692", - "uid": "71a05734-f741-4b7e-82fe-765c555b3607" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-x940", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://6abab671623159f7174321118f58600f8955267a139a72508e9a73631ef7920d", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:05:48Z" - } - } - } - ], - "hostIP": "10.132.15.192", - "phase": "Running", - "podIP": "10.132.15.192", - "podIPs": [ - { - "ip": "10.132.15.192" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:05:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:15:06.466708143Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:15:10Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"65f37105-dd71-428b-bf8b-0e82b88027f1\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.195\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:15:17Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-zzyg", - "uid": "65f37105-dd71-428b-bf8b-0e82b88027f1" - } - ], - "resourceVersion": "53113200", - "uid": "dac23622-ae54-4a1a-a6ca-3c020911966e" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-zzyg", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://ee309dad5cb7047fcbd7eb0401760ccb4bd986080ab11c860911e37b132a2a5c", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:15:09Z" - } - } - } - ], - "hostIP": "10.132.15.195", - "phase": "Running", - "podIP": "10.132.15.195", - "podIPs": [ - { - "ip": "10.132.15.195" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:15:07Z" - } - } - ], - "listInputKinds": null - } - ], - "remediation": "Avoid usage of hostPort unless it is absolutely necessary. Use NodePort / ClusterIP instead.", - "description": "Configuring hostPort limits you to a particular port, and if any two workloads that specify the same HostPort they cannot be deployed to the same node. Therefore, if the number of replica of such workload is higher than the number of nodes, the deployment will fail.", - "score": 97 - }, - { - "guid": "", - "attributes": { - "armoBuiltin": true - }, - "id": "C-0011", - "controlID": "C-0011", - "name": "Network policies", - "ruleReports": [ - { - "name": "internal-networking", - "remediation": "", - "ruleStatus": { - "status": "success", - "message": "" - }, - "ruleResponses": [ - { - "alertMessage": "no policy is defined for namespace cyberarmor-system", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Namespace", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Namespace\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"cyberarmor-system\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"cyberarmor-system\"}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:35Z", - "labels": { - "app": "cyberarmor-system", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:status": { - "f:phase": {} - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:35Z" - } - ], - "name": "cyberarmor-system", - "resourceVersion": "60786631", - "uid": "7e9fbf39-e500-4abc-bd8f-2f312e8b034b" - }, - "spec": { - "finalizers": [ - "kubernetes" - ] - }, - "status": { - "phase": "Active" - } - } - ] - } - }, - { - "alertMessage": "no policy is defined for namespace default", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Namespace", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:01Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:phase": {} - } - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "default", - "resourceVersion": "13067042", - "uid": "8a680850-44af-4b45-b1ff-16cf97823dba" - }, - "spec": { - "finalizers": [ - "kubernetes" - ] - }, - "status": { - "phase": "Active" - } - } - ] - } - }, - { - "alertMessage": "no policy is defined for namespace hipster", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Namespace", - "metadata": { - "creationTimestamp": "2021-07-27T19:59:29Z", - "labels": { - "armo.attach": "false" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:phase": {} - } - }, - "manager": "kubectl-create", - "operation": "Update", - "time": "2021-07-27T19:59:29Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:armo.attach": {} - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-12T14:44:22Z" - } - ], - "name": "hipster", - "resourceVersion": "61070430", - "uid": "a85e4e3f-050e-46b7-81df-a30bee33cc8f" - }, - "spec": { - "finalizers": [ - "kubernetes" - ] - }, - "status": { - "phase": "Active" - } - } - ] - } - }, - { - "alertMessage": "no policy is defined for namespace kube-node-lease", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Namespace", - "metadata": { - "creationTimestamp": "2021-06-13T13:41:59Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:phase": {} - } - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:41:59Z" - } - ], - "name": "kube-node-lease", - "resourceVersion": "30", - "uid": "7cecf2d0-4a10-48ec-bf69-7afe2240fe42" - }, - "spec": { - "finalizers": [ - "kubernetes" - ] - }, - "status": { - "phase": "Active" - } - } - ] - } - }, - { - "alertMessage": "no policy is defined for namespace kube-public", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Namespace", - "metadata": { - "creationTimestamp": "2021-06-13T13:41:59Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:phase": {} - } - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:41:59Z" - } - ], - "name": "kube-public", - "resourceVersion": "21", - "uid": "c11d4916-70cb-4003-9dc3-42f73c3d6e2a" - }, - "spec": { - "finalizers": [ - "kubernetes" - ] - }, - "status": { - "phase": "Active" - } - } - ] - } - }, - { - "alertMessage": "no policy is defined for namespace kube-system", - "ruleStatus": "", - "packagename": "armo_builtins", - "alertScore": 9, - "alertObject": { - "k8sApiObjects": [ - { - "apiVersion": "v1", - "kind": "Namespace", - "metadata": { - "creationTimestamp": "2021-06-13T13:41:59Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:phase": {} - } - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:41:59Z" - } - ], - "name": "kube-system", - "resourceVersion": "3", - "uid": "03e36c18-ac41-42fb-973a-da0127526204" - }, - "spec": { - "finalizers": [ - "kubernetes" - ] - }, - "status": { - "phase": "Active" - } - } - ] - } - } - ], - "listInputResources": [ - { - "apiVersion": "v1", - "kind": "Namespace", - "metadata": { - "annotations": { - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Namespace\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"cyberarmor-system\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"cyberarmor-system\"}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:35Z", - "labels": { - "app": "cyberarmor-system", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:status": { - "f:phase": {} - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:35Z" - } - ], - "name": "cyberarmor-system", - "resourceVersion": "60786631", - "uid": "7e9fbf39-e500-4abc-bd8f-2f312e8b034b" - }, - "spec": { - "finalizers": [ - "kubernetes" - ] - }, - "status": { - "phase": "Active" - } - }, - { - "apiVersion": "v1", - "kind": "Namespace", - "metadata": { - "creationTimestamp": "2021-06-13T13:42:01Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:phase": {} - } - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:42:01Z" - } - ], - "name": "default", - "resourceVersion": "13067042", - "uid": "8a680850-44af-4b45-b1ff-16cf97823dba" - }, - "spec": { - "finalizers": [ - "kubernetes" - ] - }, - "status": { - "phase": "Active" - } - }, - { - "apiVersion": "v1", - "kind": "Namespace", - "metadata": { - "creationTimestamp": "2021-07-27T19:59:29Z", - "labels": { - "armo.attach": "false" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:phase": {} - } - }, - "manager": "kubectl-create", - "operation": "Update", - "time": "2021-07-27T19:59:29Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:armo.attach": {} - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-12T14:44:22Z" - } - ], - "name": "hipster", - "resourceVersion": "61070430", - "uid": "a85e4e3f-050e-46b7-81df-a30bee33cc8f" - }, - "spec": { - "finalizers": [ - "kubernetes" - ] - }, - "status": { - "phase": "Active" - } - }, - { - "apiVersion": "v1", - "kind": "Namespace", - "metadata": { - "creationTimestamp": "2021-06-13T13:41:59Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:phase": {} - } - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:41:59Z" - } - ], - "name": "kube-node-lease", - "resourceVersion": "30", - "uid": "7cecf2d0-4a10-48ec-bf69-7afe2240fe42" - }, - "spec": { - "finalizers": [ - "kubernetes" - ] - }, - "status": { - "phase": "Active" - } - }, - { - "apiVersion": "v1", - "kind": "Namespace", - "metadata": { - "creationTimestamp": "2021-06-13T13:41:59Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:phase": {} - } - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:41:59Z" - } - ], - "name": "kube-public", - "resourceVersion": "21", - "uid": "c11d4916-70cb-4003-9dc3-42f73c3d6e2a" - }, - "spec": { - "finalizers": [ - "kubernetes" - ] - }, - "status": { - "phase": "Active" - } - }, - { - "apiVersion": "v1", - "kind": "Namespace", - "metadata": { - "creationTimestamp": "2021-06-13T13:41:59Z", - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:phase": {} - } - }, - "manager": "kube-apiserver", - "operation": "Update", - "time": "2021-06-13T13:41:59Z" - } - ], - "name": "kube-system", - "resourceVersion": "3", - "uid": "03e36c18-ac41-42fb-973a-da0127526204" - }, - "spec": { - "finalizers": [ - "kubernetes" - ] - }, - "status": { - "phase": "Active" - } - } - ], - "listInputKinds": null - } - ], - "remediation": "Define network policies or use similar network protection mechanisms.", - "description": "If no network policy is defined, attackers who gain access to a single container may use it to probe the network. This control lists all namespaces in which no network policies are defined.", - "score": 0 - }, - { - "guid": "", - "attributes": { - "armoBuiltin": true - }, - "id": "C-0058", - "controlID": "C-0058", - "name": "CVE-2021-25741 - Using symlink for arbitrary host file system access.", - "ruleReports": [ - { - "name": "Symlink-Exchange-Can-Allow-Host-Filesystem-Access", - "remediation": "", - "ruleStatus": { - "status": "success", - "message": "" - }, - "ruleResponses": null, - "listInputResources": [ - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-audit\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-audit\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-audit\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CONFIG_FILES\",\"value\":\"/config/config.json\"},{\"name\":\"CA_SERVER_TYPE\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"cluster_kind\",\"name\":\"ca-audit\"}}}],\"image\":\"quay.io/armosec/k8s-ca-auditlog-ubi:21\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-audit\",\"ports\":[{\"containerPort\":443,\"name\":\"ca-audit-port\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/config\",\"name\":\"ca-audit\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-audit\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"config\",\"path\":\"config.json\"}],\"name\":\"ca-audit\"},\"name\":\"ca-audit\"},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:54Z", - "generation": 1, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CONFIG_FILES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_SERVER_TYPE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-audit\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:54Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-audit", - "namespace": "cyberarmor-system", - "resourceVersion": "60787209", - "uid": "687f52ea-6956-4e8a-bb8c-7ea35a04b3f0" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-audit" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-audit", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CONFIG_FILES", - "value": "/config/config.json" - }, - { - "name": "CA_SERVER_TYPE", - "valueFrom": { - "configMapKeyRef": { - "key": "cluster_kind", - "name": "ca-audit" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-auditlog-ubi:21", - "imagePullPolicy": "Always", - "name": "ca-audit", - "ports": [ - { - "containerPort": 443, - "name": "ca-audit-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/config", - "name": "ca-audit", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-audit", - "serviceAccountName": "ca-audit", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "config", - "path": "config.json" - } - ], - "name": "ca-audit" - }, - "name": "ca-audit" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:54Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-audit-c667df747\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-dashboard-aggregator\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-dashboard-aggregator\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-dashboard-aggregator\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-configtype=1\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-dashboard-aggregator\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"40Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:55Z", - "generation": 1, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-dashboard-aggregator\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:55Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T23:55:20Z" - } - ], - "name": "ca-dashboard-aggregator", - "namespace": "cyberarmor-system", - "resourceVersion": "61250607", - "uid": "0ba23569-e254-4388-b22f-30cc1eca031b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-dashboard-aggregator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-dashboard-aggregator", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-configtype=1", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173", - "imagePullPolicy": "Always", - "name": "ca-dashboard-aggregator", - "resources": { - "limits": { - "cpu": "200m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "40Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:18:55Z", - "lastUpdateTime": "2021-10-12T00:19:19Z", - "message": "ReplicaSet \"ca-dashboard-aggregator-5b8bdbc8f5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-12T23:55:20Z", - "lastUpdateTime": "2021-10-12T23:55:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-notification-server\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-notification-server\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-notification-server\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"maserNotificationServer\",\"name\":\"armo-be-config\"}}},{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\",\"value\":\"customerGUID\"},{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\",\"value\":\"8001\"},{\"name\":\"CA_NOTIFICATION_SERVER_PORT\",\"value\":\"8002\"}],\"image\":\"quay.io/armosec/notification-server-ubi:89\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-notification-server\",\"ports\":[{\"containerPort\":8001,\"name\":\"websocket\"},{\"containerPort\":8002,\"name\":\"rest-api\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:59Z", - "generation": 1, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-notification-server\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER_WS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_ATTRIBUTES\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"MASTER_NOTIFICATION_SERVER_HOST\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8001,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:59Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:11Z" - } - ], - "name": "ca-notification-server", - "namespace": "cyberarmor-system", - "resourceVersion": "60787036", - "uid": "8c3dc6fe-e730-4364-8445-dc5a05ad2b0f" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-notification-server" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-notification-server", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_HOST", - "valueFrom": { - "configMapKeyRef": { - "key": "maserNotificationServer", - "name": "armo-be-config" - } - } - }, - { - "name": "MASTER_NOTIFICATION_SERVER_ATTRIBUTES", - "value": "customerGUID" - }, - { - "name": "CA_NOTIFICATION_SERVER_WS_PORT", - "value": "8001" - }, - { - "name": "CA_NOTIFICATION_SERVER_PORT", - "value": "8002" - } - ], - "image": "quay.io/armosec/notification-server-ubi:89", - "imagePullPolicy": "Always", - "name": "ca-notification-server", - "ports": [ - { - "containerPort": 8001, - "name": "websocket", - "protocol": "TCP" - }, - { - "containerPort": 8002, - "name": "rest-api", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "50Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:11Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:59Z", - "lastUpdateTime": "2021-10-12T00:19:11Z", - "message": "ReplicaSet \"ca-notification-server-6fd966c875\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-ocimage\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-ocimage\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-ocimage\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-ocimage:63\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-ocimage\",\"ports\":[{\"containerPort\":8080,\"name\":\"ca-ocimage-port\"}],\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:51Z", - "generation": 1, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-ocimage\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:04Z" - } - ], - "name": "ca-ocimage", - "namespace": "cyberarmor-system", - "resourceVersion": "60786986", - "uid": "a6d37edf-b144-4677-91b3-73c73d9c7df6" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-ocimage" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-ocimage", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-ocimage:63", - "imagePullPolicy": "Always", - "name": "ca-ocimage", - "ports": [ - { - "containerPort": 8080, - "name": "ca-ocimage-port", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "1", - "memory": "1000Mi" - }, - "requests": { - "cpu": "10m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:04Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:51Z", - "lastUpdateTime": "2021-10-12T00:19:04Z", - "message": "ReplicaSet \"ca-ocimage-5576ff7d7d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-oracle\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-oracle\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-oracle\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_ORACLE_PORT\",\"value\":\"4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8002\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-oracle-ubi:11\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-oracle\",\"ports\":[{\"containerPort\":4000,\"name\":\"ca-oracle\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:19:01Z", - "generation": 1, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-oracle\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:19:01Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:38Z" - } - ], - "name": "ca-oracle", - "namespace": "cyberarmor-system", - "resourceVersion": "60787203", - "uid": "da3dd21c-bf13-4d2a-97da-ca80b94d08d3" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-oracle" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-oracle", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_ORACLE_PORT", - "value": "4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8002" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-oracle-ubi:11", - "imagePullPolicy": "Always", - "name": "ca-oracle", - "ports": [ - { - "containerPort": 4000, - "name": "ca-oracle", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "100m", - "memory": "100Mi" - }, - "requests": { - "cpu": "10m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:38Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:19:01Z", - "lastUpdateTime": "2021-10-12T00:19:38Z", - "message": "ReplicaSet \"ca-oracle-6c98c6bdbf\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-posture\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-posture\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-posture\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"ca-notification-server:8001\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-posture-ubi:112\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-posture\",\"ports\":[{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/resources/config\",\"name\":\"ca-posture-score-config\",\"readOnly\":false},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"},{\"configMap\":{\"items\":[{\"key\":\"resourcesdict.json\",\"path\":\"resourcesdict.json\"},{\"key\":\"frameworkdict.json\",\"path\":\"frameworkdict.json\"}],\"name\":\"ca-posture-score-config\"},\"name\":\"ca-posture-score-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:58Z", - "generation": 1, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-posture\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/resources/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-posture-score-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:58Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:45Z" - } - ], - "name": "ca-posture", - "namespace": "cyberarmor-system", - "resourceVersion": "60787259", - "uid": "f41f4dc1-cfb0-4201-bca7-f1cf0b72b6b7" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-posture" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-posture", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "ca-notification-server:8001" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-posture-ubi:112", - "imagePullPolicy": "Always", - "name": "ca-posture", - "ports": [ - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "500m", - "memory": "100Mi" - }, - "requests": { - "cpu": "100m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/resources/config", - "name": "ca-posture-score-config" - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "resourcesdict.json", - "path": "resourcesdict.json" - }, - { - "key": "frameworkdict.json", - "path": "frameworkdict.json" - } - ], - "name": "ca-posture-score-config" - }, - "name": "ca-posture-score-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:45Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:58Z", - "lastUpdateTime": "2021-10-12T00:19:45Z", - "message": "ReplicaSet \"ca-posture-5996968d7b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-rbac\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-rbac\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-rbac\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}},{\"name\":\"S3_BUCKET\",\"value\":\"ca-kubernetes-rbac-db-dev\"},{\"name\":\"AWS_REGION\",\"value\":\"eu-west-1\"},{\"name\":\"AWS_ACCESS_KEY_ID\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keyid\",\"name\":\"ca-rbac\"}}},{\"name\":\"AWS_SECRET_ACCESS_KEY\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"keysecret\",\"name\":\"ca-rbac\"}}}],\"image\":\"quay.io/armosec/k8s-ca-rbac-scanner-ubi:20\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-rbac\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"400Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:50Z", - "generation": 1, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-rbac\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AWS_ACCESS_KEY_ID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"AWS_REGION\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"AWS_SECRET_ACCESS_KEY\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:secretKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"S3_BUCKET\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:13Z" - } - ], - "name": "ca-rbac", - "namespace": "cyberarmor-system", - "resourceVersion": "60787051", - "uid": "d5898a09-2489-4254-b210-0725ddb2427a" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-rbac" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-rbac", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - }, - { - "name": "S3_BUCKET", - "value": "ca-kubernetes-rbac-db-dev" - }, - { - "name": "AWS_REGION", - "value": "eu-west-1" - }, - { - "name": "AWS_ACCESS_KEY_ID", - "valueFrom": { - "secretKeyRef": { - "key": "keyid", - "name": "ca-rbac" - } - } - }, - { - "name": "AWS_SECRET_ACCESS_KEY", - "valueFrom": { - "secretKeyRef": { - "key": "keysecret", - "name": "ca-rbac" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-rbac-scanner-ubi:20", - "imagePullPolicy": "Always", - "name": "ca-rbac", - "resources": { - "limits": { - "cpu": "200m", - "memory": "400Mi" - }, - "requests": { - "cpu": "10m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:13Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:50Z", - "lastUpdateTime": "2021-10-12T00:19:13Z", - "message": "ReplicaSet \"ca-rbac-75c8cfd6b4\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-vuln-scan\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-vuln-scan\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-vuln-scan\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"EVENT_RECEIVER_URL\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"value\":\"https://report.eustage2.cyberarmorsoft.com\"},{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\",\"value\":\"4\"}],\"image\":\"quay.io/armosec/k8s-ca-vuln-scan-ubi:84\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-vuln-scan\",\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"1.5Gi\"},\"requests\":{\"cpu\":\"500m\",\"memory\":\"1Gi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:47Z", - "generation": 1, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-vuln-scan\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_MAX_VULN_SCAN_ROUTINS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EVENT_RECEIVER_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:00Z" - } - ], - "name": "ca-vuln-scan", - "namespace": "cyberarmor-system", - "resourceVersion": "60786938", - "uid": "9ea3d6cb-c6c0-423f-aab2-630827939285" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-vuln-scan" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-vuln-scan", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "EVENT_RECEIVER_URL", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "value": "https://report.eustage2.cyberarmorsoft.com" - }, - { - "name": "CA_MAX_VULN_SCAN_ROUTINS", - "value": "4" - } - ], - "image": "quay.io/armosec/k8s-ca-vuln-scan-ubi:84", - "imagePullPolicy": "Always", - "name": "ca-vuln-scan", - "resources": { - "limits": { - "cpu": "1", - "memory": "1536Mi" - }, - "requests": { - "cpu": "500m", - "memory": "1Gi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:00Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:47Z", - "lastUpdateTime": "2021-10-12T00:19:00Z", - "message": "ReplicaSet \"ca-vuln-scan-75b499df8c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-webhook\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-webhook\"}},\"template\":{\"metadata\":{\"annotations\":{\"certificate\":\"d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt\"},\"labels\":{\"app\":\"ca-webhook\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-tlsCertFile=/etc/webhook/certs/tls.crt\",\"-tlsKeyFile=/etc/webhook/certs/tls.key\",\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_CLUSTER_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"clusterName\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_CUSTOMER_GUID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"customerGUID\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_WEBHOOK_NAME\",\"value\":\"ca-webhook\"},{\"name\":\"CA_WEBHOOK_PORT\",\"value\":\"443\"},{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_DASHBOARD_BACKEND\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dashboard\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_LOGIN_SECRET_NAME\",\"value\":\"ca-login\"},{\"name\":\"CA_ORACLE_SERVER\",\"value\":\"http://ca-oracle:4000\"},{\"name\":\"CA_NOTIFICATION_SERVER\",\"value\":\"http://ca-notification-server:8001\"},{\"name\":\"CA_OCIMAGE_URL\",\"value\":\"http://ca-ocimage:8080\"},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_K8S_REPORT_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverWS\",\"name\":\"armo-be-config\"}}},{\"name\":\"CA_EVENT_RECEIVER_HTTP\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"eventReceiverREST\",\"name\":\"armo-be-config\"}}}],\"image\":\"quay.io/armosec/k8s-ca-webhook-ubi:606\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-webhook\",\"ports\":[{\"containerPort\":443,\"name\":\"mutating-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"600Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"100Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/cazips\",\"name\":\"zip-download\"},{\"mountPath\":\"/etc/webhook/certs\",\"name\":\"ca-cluster-certificate\",\"readOnly\":true},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"emptyDir\":{},\"name\":\"zip-download\"},{\"name\":\"ca-cluster-certificate\",\"secret\":{\"secretName\":\"ca-cluster-certificate\"}},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:46Z", - "generation": 1, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:certificate": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-webhook\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_CLUSTER_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_CUSTOMER_GUID\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_DASHBOARD_BACKEND\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_EVENT_RECEIVER_HTTP\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_K8S_REPORT_URL\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:configMapKeyRef": { - ".": {}, - "f:key": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"CA_LOGIN_SECRET_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_NOTIFICATION_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_OCIMAGE_URL\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_ORACLE_SERVER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_NAME\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_WEBHOOK_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/cazips\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/webhook/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-cluster-certificate\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"zip-download\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:16Z" - } - ], - "name": "ca-webhook", - "namespace": "cyberarmor-system", - "resourceVersion": "60787072", - "uid": "c968fe90-8480-471f-bdf1-fa98447ce1d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-webhook" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "certificate": "d6d0ce2f83a3d20abfc7aae99f9c1cad ca.crt" - }, - "creationTimestamp": null, - "labels": { - "app": "ca-webhook", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-tlsCertFile=/etc/webhook/certs/tls.crt", - "-tlsKeyFile=/etc/webhook/certs/tls.key", - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_CLUSTER_NAME", - "valueFrom": { - "configMapKeyRef": { - "key": "clusterName", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_CUSTOMER_GUID", - "valueFrom": { - "configMapKeyRef": { - "key": "customerGUID", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_WEBHOOK_NAME", - "value": "ca-webhook" - }, - { - "name": "CA_WEBHOOK_PORT", - "value": "443" - }, - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_DASHBOARD_BACKEND", - "valueFrom": { - "configMapKeyRef": { - "key": "dashboard", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_LOGIN_SECRET_NAME", - "value": "ca-login" - }, - { - "name": "CA_ORACLE_SERVER", - "value": "http://ca-oracle:4000" - }, - { - "name": "CA_NOTIFICATION_SERVER", - "value": "http://ca-notification-server:8001" - }, - { - "name": "CA_OCIMAGE_URL", - "value": "http://ca-ocimage:8080" - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_K8S_REPORT_URL", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverWS", - "name": "armo-be-config" - } - } - }, - { - "name": "CA_EVENT_RECEIVER_HTTP", - "valueFrom": { - "configMapKeyRef": { - "key": "eventReceiverREST", - "name": "armo-be-config" - } - } - } - ], - "image": "quay.io/armosec/k8s-ca-webhook-ubi:606", - "imagePullPolicy": "Always", - "name": "ca-webhook", - "ports": [ - { - "containerPort": 443, - "name": "mutating-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "600Mi" - }, - "requests": { - "cpu": "300m", - "memory": "100Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/cazips", - "name": "zip-download" - }, - { - "mountPath": "/etc/webhook/certs", - "name": "ca-cluster-certificate", - "readOnly": true - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "emptyDir": {}, - "name": "zip-download" - }, - { - "name": "ca-cluster-certificate", - "secret": { - "defaultMode": 420, - "secretName": "ca-cluster-certificate" - } - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:16Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:46Z", - "lastUpdateTime": "2021-10-12T00:19:16Z", - "message": "ReplicaSet \"ca-webhook-7dd8bbd798\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"},\"name\":\"ca-websocket\",\"namespace\":\"cyberarmor-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"ca-websocket\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"ca-websocket\",\"tier\":\"cyberarmor-system-control-plane\"}},\"spec\":{\"containers\":[{\"args\":[\"-alsologtostderr\",\"-v=4\",\"2\\u003e\\u00261\"],\"env\":[{\"name\":\"CA_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CA_USE_DOCKER\",\"value\":\"true\"},{\"name\":\"CA_VULN_SCAN_SCHEDULE\",\"value\":\"@every 11h\"},{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\",\"value\":\"@every 12h\"},{\"name\":\"CA_DEBUG_SIGNER\",\"value\":null}],\"image\":\"quay.io/armosec/k8s-ca-websocket-ubi:406\",\"imagePullPolicy\":\"Always\",\"name\":\"ca-websocket\",\"ports\":[{\"containerPort\":4002,\"name\":\"trigger-port\"},{\"containerPort\":8000,\"name\":\"readiness-port\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/v1/readiness\",\"port\":\"readiness-port\"},\"initialDelaySeconds\":10,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"1500m\",\"memory\":\"1000Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/var/run/docker.sock\",\"name\":\"docker-socket-volume\"},{\"mountPath\":\"/etc/credentials\",\"name\":\"ca-login\",\"readOnly\":true},{\"mountPath\":\"/etc/config\",\"name\":\"armo-be-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"ca-controller-service-account\",\"volumes\":[{\"hostPath\":{\"path\":\"/var/run/docker.sock\"},\"name\":\"docker-socket-volume\"},{\"name\":\"ca-login\",\"secret\":{\"secretName\":\"ca-login\"}},{\"configMap\":{\"items\":[{\"key\":\"clusterData\",\"path\":\"clusterData.json\"}],\"name\":\"armo-be-config\"},\"name\":\"armo-be-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:18:43Z", - "generation": 1, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {}, - "f:tier": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"ca-websocket\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CA_DEBUG_SIGNER\"}": { - ".": {}, - "f:name": {} - }, - "k:{\"name\":\"CA_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"CA_POSTURE_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_USE_DOCKER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CA_VULN_SCAN_SCHEDULE\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":4002,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":8000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/etc/credentials\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/run/docker.sock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"armo-be-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"ca-login\"}": { - ".": {}, - "f:name": {}, - "f:secret": { - ".": {}, - "f:defaultMode": {}, - "f:secretName": {} - } - }, - "k:{\"name\":\"docker-socket-volume\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:18:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-12T00:19:14Z" - } - ], - "name": "ca-websocket", - "namespace": "cyberarmor-system", - "resourceVersion": "60787065", - "uid": "914f30e9-d858-4945-9314-cbd3422ebaab" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "ca-websocket" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "app": "ca-websocket", - "tier": "cyberarmor-system-control-plane" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-alsologtostderr", - "-v=4", - "2\u003e\u00261" - ], - "env": [ - { - "name": "CA_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - }, - { - "name": "CA_USE_DOCKER", - "value": "true" - }, - { - "name": "CA_VULN_SCAN_SCHEDULE", - "value": "@every 11h" - }, - { - "name": "CA_POSTURE_SCAN_SCHEDULE", - "value": "@every 12h" - }, - { - "name": "CA_DEBUG_SIGNER" - } - ], - "image": "quay.io/armosec/k8s-ca-websocket-ubi:406", - "imagePullPolicy": "Always", - "name": "ca-websocket", - "ports": [ - { - "containerPort": 4002, - "name": "trigger-port", - "protocol": "TCP" - }, - { - "containerPort": 8000, - "name": "readiness-port", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/v1/readiness", - "port": "readiness-port", - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "1500m", - "memory": "1000Mi" - }, - "requests": { - "cpu": "300m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/run/docker.sock", - "name": "docker-socket-volume" - }, - { - "mountPath": "/etc/credentials", - "name": "ca-login", - "readOnly": true - }, - { - "mountPath": "/etc/config", - "name": "armo-be-config", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "ca-controller-service-account", - "serviceAccountName": "ca-controller-service-account", - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "hostPath": { - "path": "/var/run/docker.sock", - "type": "" - }, - "name": "docker-socket-volume" - }, - { - "name": "ca-login", - "secret": { - "defaultMode": 420, - "secretName": "ca-login" - } - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "clusterData", - "path": "clusterData.json" - } - ], - "name": "armo-be-config" - }, - "name": "armo-be-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:19:14Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:18:43Z", - "lastUpdateTime": "2021-10-12T00:19:14Z", - "message": "ReplicaSet \"ca-websocket-857758846f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 1, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"adservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"adservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"adservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/adservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"name\":\"server\",\"ports\":[{\"containerPort\":9555}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:9555\"]},\"initialDelaySeconds\":20,\"periodSeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"180Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:51Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":9555,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:51Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:12Z" - } - ], - "name": "adservice", - "namespace": "hipster", - "resourceVersion": "61263240", - "uid": "368bea36-82be-4c28-8607-cf931a836185" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "adservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6415784d-d96b-4866-9c10-d571c8d8fd35", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:29", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-adservice" - }, - "creationTimestamp": null, - "labels": { - "app": "adservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/adservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 9555, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:9555" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 20, - "periodSeconds": 15, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "300Mi" - }, - "requests": { - "cpu": "200m", - "memory": "180Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:24Z", - "lastUpdateTime": "2021-10-12T00:12:24Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:51Z", - "lastUpdateTime": "2021-10-13T00:28:12Z", - "message": "ReplicaSet \"adservice-7864446d5c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"cartservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"cartservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"cartservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"REDIS_ADDR\",\"value\":\"redis-cart:6379\"}],\"image\":\"gcr.io/google-samples/microservices-demo/cartservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15,\"periodSeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":7070}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7070\",\"-rpc-timeout=5s\"]},\"initialDelaySeconds\":15},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:47Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"REDIS_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7070,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T09:40:08Z" - } - ], - "name": "cartservice", - "namespace": "hipster", - "resourceVersion": "61443544", - "uid": "df767287-ffc1-4559-b7fd-32b09bf6208c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "cartservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "7ced7c5c-c483-40b3-b6bc-8829339dc3e1", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:04", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-cartservice" - }, - "creationTimestamp": null, - "labels": { - "app": "cartservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "REDIS_ADDR", - "value": "redis-cart:6379" - } - ], - "image": "gcr.io/google-samples/microservices-demo/cartservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7070, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7070", - "-rpc-timeout=5s" - ] - }, - "failureThreshold": 3, - "initialDelaySeconds": 15, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "300m", - "memory": "128Mi" - }, - "requests": { - "cpu": "200m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-13T00:27:35Z", - "message": "ReplicaSet \"cartservice-7c8f8f9ddd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T09:40:08Z", - "lastUpdateTime": "2021-10-13T09:40:08Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"checkoutservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"checkoutservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"checkoutservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"5050\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"PAYMENT_SERVICE_ADDR\",\"value\":\"paymentservice:50051\"},{\"name\":\"EMAIL_SERVICE_ADDR\",\"value\":\"emailservice:5000\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"}],\"image\":\"gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":5050}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:5050\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:42Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"EMAIL_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PAYMENT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":5050,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:42Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:41Z" - } - ], - "name": "checkoutservice", - "namespace": "hipster", - "resourceVersion": "61262985", - "uid": "b5e6a8d8-1ec6-4acc-bf14-e3bb28bff284" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "checkoutservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "bebad8bb-8728-4813-ae19-d22a38a289a5", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:28", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-checkoutservice" - }, - "creationTimestamp": null, - "labels": { - "app": "checkoutservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "5050" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "PAYMENT_SERVICE_ADDR", - "value": "paymentservice:50051" - }, - { - "name": "EMAIL_SERVICE_ADDR", - "value": "emailservice:5000" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - } - ], - "image": "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 5050, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:5050" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T14:05:32Z", - "lastUpdateTime": "2021-10-12T14:05:32Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:42Z", - "lastUpdateTime": "2021-10-13T00:27:42Z", - "message": "ReplicaSet \"checkoutservice-86c564466c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"currencyservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"currencyservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"currencyservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"7000\"}],\"image\":\"gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":7000,\"name\":\"grpc\"}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:7000\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":7000,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T08:37:54Z" - } - ], - "name": "currencyservice", - "namespace": "hipster", - "resourceVersion": "61423238", - "uid": "167b75e1-1be2-4764-aaad-dbb1ae248d3c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "currencyservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "4aa34494-0348-4859-9e29-56df9baf52ba", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-currencyservice" - }, - "creationTimestamp": null, - "labels": { - "app": "currencyservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "7000" - } - ], - "image": "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 7000, - "name": "grpc", - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:7000" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:29:19Z", - "message": "ReplicaSet \"currencyservice-544b6d849c\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-10-13T08:37:54Z", - "lastUpdateTime": "2021-10-13T08:37:54Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"emailservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"emailservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"emailservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"DISABLE_PROFILER\",\"value\":\"1\"}],\"image\":\"gcr.io/google-samples/microservices-demo/emailservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:41Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"DISABLE_PROFILER\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:41Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:07Z" - } - ], - "name": "emailservice", - "namespace": "hipster", - "resourceVersion": "61263204", - "uid": "9959433f-c964-4e6d-a2d7-3d1b9b617948" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "emailservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "e8aa9826-2367-44e1-9aad-a6d617b0fa06", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:48", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-emailservice" - }, - "creationTimestamp": null, - "labels": { - "app": "emailservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "DISABLE_PROFILER", - "value": "1" - } - ], - "image": "gcr.io/google-samples/microservices-demo/emailservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:47Z", - "lastUpdateTime": "2021-10-12T00:11:47Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:41Z", - "lastUpdateTime": "2021-10-13T00:28:08Z", - "message": "ReplicaSet \"emailservice-cc7c4cd87\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"frontend\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"frontend\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"frontend\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"},{\"name\":\"CURRENCY_SERVICE_ADDR\",\"value\":\"currencyservice:7000\"},{\"name\":\"CART_SERVICE_ADDR\",\"value\":\"cartservice:7070\"},{\"name\":\"RECOMMENDATION_SERVICE_ADDR\",\"value\":\"recommendationservice:8080\"},{\"name\":\"SHIPPING_SERVICE_ADDR\",\"value\":\"shippingservice:50051\"},{\"name\":\"CHECKOUT_SERVICE_ADDR\",\"value\":\"checkoutservice:5050\"},{\"name\":\"AD_SERVICE_ADDR\",\"value\":\"adservice:9555\"}],\"image\":\"gcr.io/google-samples/microservices-demo/frontend:v0.2.3\",\"livenessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-liveness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"Cookie\",\"value\":\"shop_session-id=x-readiness-probe\"}],\"path\":\"/_healthz\",\"port\":8080},\"initialDelaySeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:44Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"AD_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CART_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CHECKOUT_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"CURRENCY_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"RECOMMENDATION_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"SHIPPING_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:httpHeaders": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:44Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:34Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:22Z" - } - ], - "name": "frontend", - "namespace": "hipster", - "resourceVersion": "61263336", - "uid": "86b92d9e-22ad-4f0a-be26-41343f05f0d2" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "frontend" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9611f05f-4a8b-48ff-9722-e6a2ec702d65", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:57", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-frontend", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "frontend", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - }, - { - "name": "CURRENCY_SERVICE_ADDR", - "value": "currencyservice:7000" - }, - { - "name": "CART_SERVICE_ADDR", - "value": "cartservice:7070" - }, - { - "name": "RECOMMENDATION_SERVICE_ADDR", - "value": "recommendationservice:8080" - }, - { - "name": "SHIPPING_SERVICE_ADDR", - "value": "shippingservice:50051" - }, - { - "name": "CHECKOUT_SERVICE_ADDR", - "value": "checkoutservice:5050" - }, - { - "name": "AD_SERVICE_ADDR", - "value": "adservice:9555" - } - ], - "image": "gcr.io/google-samples/microservices-demo/frontend:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-liveness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "httpHeaders": [ - { - "name": "Cookie", - "value": "shop_session-id=x-readiness-probe" - } - ], - "path": "/_healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 10, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:04Z", - "lastUpdateTime": "2021-10-12T00:12:04Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:44Z", - "lastUpdateTime": "2021-10-13T00:28:23Z", - "message": "ReplicaSet \"frontend-c747f6f47\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"loadgenerator\",\"namespace\":\"hipster\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"loadgenerator\"}},\"template\":{\"metadata\":{\"annotations\":{\"sidecar.istio.io/rewriteAppHTTPProbers\":\"true\"},\"labels\":{\"app\":\"loadgenerator\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"FRONTEND_ADDR\",\"value\":\"frontend:80\"},{\"name\":\"USERS\",\"value\":\"10\"}],\"image\":\"gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3\",\"name\":\"main\",\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"300m\",\"memory\":\"256Mi\"}}}],\"restartPolicy\":\"Always\",\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:48Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:sidecar.istio.io/rewriteAppHTTPProbers": {} - }, - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"main\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"FRONTEND_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"USERS\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:48Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:38Z" - } - ], - "name": "loadgenerator", - "namespace": "hipster", - "resourceVersion": "61263451", - "uid": "e9200650-d25d-43f2-b1bc-4615beaed50c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "loadgenerator" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "baca3d0f-fdc8-42c6-a9b1-ee29b3d173e0", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:26", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-loadgenerator", - "sidecar.istio.io/rewriteAppHTTPProbers": "true" - }, - "creationTimestamp": null, - "labels": { - "app": "loadgenerator", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "FRONTEND_ADDR", - "value": "frontend:80" - }, - { - "name": "USERS", - "value": "10" - } - ], - "image": "gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "name": "main", - "resources": { - "limits": { - "cpu": "500m", - "memory": "512Mi" - }, - "requests": { - "cpu": "300m", - "memory": "256Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-13T00:24:15Z", - "lastUpdateTime": "2021-10-13T00:24:15Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:48Z", - "lastUpdateTime": "2021-10-13T00:28:38Z", - "message": "ReplicaSet \"loadgenerator-6dcb6ffc4f\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"paymentservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"paymentservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"paymentservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:45Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:45Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:29:27Z" - } - ], - "name": "paymentservice", - "namespace": "hipster", - "resourceVersion": "61263785", - "uid": "ab21c30f-d153-4ea8-982e-e12a71745dae" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "paymentservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "60b5720d-99b5-47a0-8bc4-656b372a6d17", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:52", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-paymentservice" - }, - "creationTimestamp": null, - "labels": { - "app": "paymentservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:45Z", - "lastUpdateTime": "2021-10-13T00:29:27Z", - "message": "ReplicaSet \"paymentservice-849b876ffd\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"productcatalogservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"productcatalogservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"productcatalogservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":3550}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:3550\"]}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:46Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":3550,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:46Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:57Z" - } - ], - "name": "productcatalogservice", - "namespace": "hipster", - "resourceVersion": "61263117", - "uid": "50b29b6e-0f97-43b8-9555-a53d9c0e18f9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "productcatalogservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "9bb4cc06-3907-401b-919f-c2974a623068", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:44", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-productcatalogservice" - }, - "creationTimestamp": null, - "labels": { - "app": "productcatalogservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 3550, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:3550" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:55Z", - "lastUpdateTime": "2021-10-12T00:11:55Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:46Z", - "lastUpdateTime": "2021-10-13T00:27:57Z", - "message": "ReplicaSet \"productcatalogservice-586fd876d5\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"recommendationservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"recommendationservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"recommendationservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"8080\"},{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\",\"value\":\"productcatalogservice:3550\"}],\"image\":\"gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"name\":\"server\",\"ports\":[{\"containerPort\":8080}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:8080\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"450Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"220Mi\"}}}],\"serviceAccountName\":\"default\",\"terminationGracePeriodSeconds\":5}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:43Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - }, - "k:{\"name\":\"PRODUCT_CATALOG_SERVICE_ADDR\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:43Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:33Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:28:37Z" - } - ], - "name": "recommendationservice", - "namespace": "hipster", - "resourceVersion": "61263443", - "uid": "00437f28-24c4-4759-ab93-f0be948eabc9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "recommendationservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "8cace306-b3ce-4f2f-8a6f-b122873b4eee", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:28:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-recommendationservice" - }, - "creationTimestamp": null, - "labels": { - "app": "recommendationservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "8080" - }, - { - "name": "PRODUCT_CATALOG_SERVICE_ADDR", - "value": "productcatalogservice:3550" - } - ], - "image": "gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:8080" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "450Mi" - }, - "requests": { - "cpu": "100m", - "memory": "220Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 5 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-12T00:11:50Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:43Z", - "lastUpdateTime": "2021-10-13T00:28:37Z", - "message": "ReplicaSet \"recommendationservice-54b7b7b95d\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"redis-cart\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"redis-cart\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"redis-cart\"}},\"spec\":{\"containers\":[{\"image\":\"redis:alpine\",\"livenessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"name\":\"redis\",\"ports\":[{\"containerPort\":6379}],\"readinessProbe\":{\"periodSeconds\":5,\"tcpSocket\":{\"port\":6379}},\"resources\":{\"limits\":{\"cpu\":\"125m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"70m\",\"memory\":\"200Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/data\",\"name\":\"redis-data\"}]}],\"volumes\":[{\"emptyDir\":{},\"name\":\"redis-data\"}]}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:50Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"redis\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":6379,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:tcpSocket": { - ".": {}, - "f:port": {} - }, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/data\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"redis-data\"}": { - ".": {}, - "f:emptyDir": {}, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:50Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:32Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:38Z" - } - ], - "name": "redis-cart", - "namespace": "hipster", - "resourceVersion": "61262948", - "uid": "76b3aebb-9ec5-479e-81ae-975ccf1bc6ec" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "redis-cart" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "838a7c21-618b-4693-a13b-838a9231ca58", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:27:18", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-redis-cart" - }, - "creationTimestamp": null, - "labels": { - "app": "redis-cart", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "image": "redis:alpine", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "name": "redis", - "ports": [ - { - "containerPort": 6379, - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "tcpSocket": { - "port": 6379 - }, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "125m", - "memory": "256Mi" - }, - "requests": { - "cpu": "70m", - "memory": "200Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/data", - "name": "redis-data" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "volumes": [ - { - "emptyDir": {}, - "name": "redis-data" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:11:57Z", - "lastUpdateTime": "2021-10-12T00:11:57Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:50Z", - "lastUpdateTime": "2021-10-13T00:27:38Z", - "message": "ReplicaSet \"redis-cart-594778c8b9\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "9", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"shippingservice\",\"namespace\":\"hipster\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"shippingservice\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"shippingservice\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"PORT\",\"value\":\"50051\"}],\"image\":\"gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]}},\"name\":\"server\",\"ports\":[{\"containerPort\":50051}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/grpc_health_probe\",\"-addr=:50051\"]},\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}}}],\"serviceAccountName\":\"default\"}}}}\n" - }, - "creationTimestamp": "2021-10-12T00:11:49Z", - "generation": 9, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"server\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":50051,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:exec": { - ".": {}, - "f:command": {} - }, - "f:failureThreshold": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {} - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-10-12T00:11:49Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:armo.job/action": {}, - "f:armo.job/id": {}, - "f:armo.job/parent": {}, - "f:armo.last-update": {}, - "f:armo.wlid": {} - }, - "f:labels": { - "f:armo.attach": {} - } - } - } - } - }, - "manager": "k8s-ca-websocket", - "operation": "Update", - "time": "2021-10-13T00:22:35Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-10-13T00:27:11Z" - } - ], - "name": "shippingservice", - "namespace": "hipster", - "resourceVersion": "61262726", - "uid": "febd2fe5-0e28-448e-aabd-31904ebb82a9" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "app": "shippingservice" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "armo.job/action": "7", - "armo.job/id": "6503b850-839c-4b73-95ab-195d27b3c10d", - "armo.job/parent": "", - "armo.last-update": "13-10-2021 00:26:58", - "armo.wlid": "wlid://cluster-lss1/namespace-hipster/deployment-shippingservice" - }, - "creationTimestamp": null, - "labels": { - "app": "shippingservice", - "armo.attach": "true" - } - }, - "spec": { - "containers": [ - { - "env": [ - { - "name": "PORT", - "value": "50051" - } - ], - "image": "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "name": "server", - "ports": [ - { - "containerPort": 50051, - "protocol": "TCP" - } - ], - "readinessProbe": { - "exec": { - "command": [ - "/bin/grpc_health_probe", - "-addr=:50051" - ] - }, - "failureThreshold": 3, - "periodSeconds": 5, - "successThreshold": 1, - "timeoutSeconds": 1 - }, - "resources": { - "limits": { - "cpu": "200m", - "memory": "128Mi" - }, - "requests": { - "cpu": "100m", - "memory": "64Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "default", - "serviceAccountName": "default", - "terminationGracePeriodSeconds": 30 - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-10-12T00:12:00Z", - "lastUpdateTime": "2021-10-12T00:12:00Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-10-12T00:11:49Z", - "lastUpdateTime": "2021-10-13T00:27:11Z", - "message": "ReplicaSet \"shippingservice-758c9b4d4b\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 9, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":\"10%\",\"maxUnavailable\":0}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"kubedns\",\"prometheus.io/port\":\"10054\",\"prometheus.io/scrape\":\"true\",\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"seccomp.security.alpha.kubernetes.io/pod\":\"runtime/default\"},\"labels\":{\"k8s-app\":\"kube-dns\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchExpressions\":[{\"key\":\"k8s-app\",\"operator\":\"In\",\"values\":[\"kube-dns\"]}]},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"--domain=cluster.local.\",\"--dns-port=10053\",\"--config-dir=/kube-dns-config\",\"--v=2\"],\"env\":[{\"name\":\"PROMETHEUS_PORT\",\"value\":\"10055\"}],\"image\":\"gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/kubedns\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"kubedns\",\"ports\":[{\"containerPort\":10053,\"name\":\"dns-local\",\"protocol\":\"UDP\"},{\"containerPort\":10053,\"name\":\"dns-tcp-local\",\"protocol\":\"TCP\"},{\"containerPort\":10055,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readiness\",\"port\":8081,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":3,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"memory\":\"210Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"70Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001},\"volumeMounts\":[{\"mountPath\":\"/kube-dns-config\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"-v=2\",\"-logtostderr\",\"-configDir=/etc/k8s/dns/dnsmasq-nanny\",\"-restartDnsmasq=true\",\"--\",\"-k\",\"--cache-size=1000\",\"--no-negcache\",\"--dns-forward-max=1500\",\"--log-facility=-\",\"--server=/cluster.local/127.0.0.1#10053\",\"--server=/in-addr.arpa/127.0.0.1#10053\",\"--server=/ip6.arpa/127.0.0.1#10053\"],\"image\":\"gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/healthcheck/dnsmasq\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"dnsmasq\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"150m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"capabilities\":{\"add\":[\"NET_BIND_SERVICE\",\"SETGID\"],\"drop\":[\"all\"]}},\"volumeMounts\":[{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\",\"name\":\"kube-dns-config\"}]},{\"args\":[\"--v=2\",\"--logtostderr\",\"--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV\",\"--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV\"],\"image\":\"gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1\",\"livenessProbe\":{\"failureThreshold\":5,\"httpGet\":{\"path\":\"/metrics\",\"port\":10054,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"sidecar\",\"ports\":[{\"containerPort\":10054,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1001,\"runAsUser\":1001}}],\"dnsPolicy\":\"Default\",\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 4, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": {}, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:scheduler.alpha.kubernetes.io/critical-pod": {}, - "f:seccomp.security.alpha.kubernetes.io/pod": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:podAntiAffinity": { - ".": {}, - "f:preferredDuringSchedulingIgnoredDuringExecution": {} - } - }, - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:capabilities": { - ".": {}, - "f:add": {}, - "f:drop": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/k8s/dns/dnsmasq-nanny\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"kubedns\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"PROMETHEUS_PORT\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10053,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10053,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":10055,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:readinessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/kube-dns-config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"sidecar\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":10054,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:allowPrivilegeEscalation": {}, - "f:readOnlyRootFilesystem": {}, - "f:runAsGroup": {}, - "f:runAsUser": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-name": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"dnsmasq\"}": { - "f:image": {} - }, - "k:{\"name\":\"kubedns\"}": { - "f:image": {} - }, - "k:{\"name\":\"sidecar\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:06:26Z" - } - ], - "name": "kube-dns", - "namespace": "kube-system", - "resourceVersion": "53109905", - "uid": "cd5cca24-7cd2-4548-a5d3-d90beb79f9e8" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 2, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "10%", - "maxUnavailable": 0 - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "kubedns", - "prometheus.io/port": "10054", - "prometheus.io/scrape": "true", - "scheduler.alpha.kubernetes.io/critical-pod": "", - "seccomp.security.alpha.kubernetes.io/pod": "runtime/default" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns" - } - }, - "spec": { - "affinity": { - "podAntiAffinity": { - "preferredDuringSchedulingIgnoredDuringExecution": [ - { - "podAffinityTerm": { - "labelSelector": { - "matchExpressions": [ - { - "key": "k8s-app", - "operator": "In", - "values": [ - "kube-dns" - ] - } - ] - }, - "topologyKey": "kubernetes.io/hostname" - }, - "weight": 100 - } - ] - } - }, - "containers": [ - { - "args": [ - "--domain=cluster.local.", - "--dns-port=10053", - "--config-dir=/kube-dns-config", - "--v=2" - ], - "env": [ - { - "name": "PROMETHEUS_PORT", - "value": "10055" - } - ], - "image": "gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/kubedns", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "kubedns", - "ports": [ - { - "containerPort": 10053, - "name": "dns-local", - "protocol": "UDP" - }, - { - "containerPort": 10053, - "name": "dns-tcp-local", - "protocol": "TCP" - }, - { - "containerPort": 10055, - "name": "metrics", - "protocol": "TCP" - } - ], - "readinessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/readiness", - "port": 8081, - "scheme": "HTTP" - }, - "initialDelaySeconds": 3, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "resources": { - "limits": { - "memory": "210Mi" - }, - "requests": { - "cpu": "100m", - "memory": "70Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/kube-dns-config", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "-v=2", - "-logtostderr", - "-configDir=/etc/k8s/dns/dnsmasq-nanny", - "-restartDnsmasq=true", - "--", - "-k", - "--cache-size=1000", - "--no-negcache", - "--dns-forward-max=1500", - "--log-facility=-", - "--server=/cluster.local/127.0.0.1#10053", - "--server=/in-addr.arpa/127.0.0.1#10053", - "--server=/ip6.arpa/127.0.0.1#10053" - ], - "image": "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/healthcheck/dnsmasq", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "dnsmasq", - "ports": [ - { - "containerPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "150m", - "memory": "20Mi" - } - }, - "securityContext": { - "capabilities": { - "add": [ - "NET_BIND_SERVICE", - "SETGID" - ], - "drop": [ - "all" - ] - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/k8s/dns/dnsmasq-nanny", - "name": "kube-dns-config" - } - ] - }, - { - "args": [ - "--v=2", - "--logtostderr", - "--probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local,5,SRV", - "--probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local,5,SRV" - ], - "image": "gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 5, - "httpGet": { - "path": "/metrics", - "port": 10054, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "sidecar", - "ports": [ - { - "containerPort": 10054, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "securityContext": { - "allowPrivilegeEscalation": false, - "readOnlyRootFilesystem": true, - "runAsGroup": 1001, - "runAsUser": 1001 - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns", - "serviceAccountName": "kube-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - } - ] - } - } - }, - "status": { - "availableReplicas": 2, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-09-11T01:57:38Z", - "message": "ReplicaSet \"kube-dns-59844ff879\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:06:26Z", - "lastUpdateTime": "2021-09-25T17:06:26Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 4, - "readyReplicas": 2, - "replicas": 2, - "updatedReplicas": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-dns-autoscaler\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"kube-dns-autoscaler\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-dns-autoscaler\"}},\"spec\":{\"containers\":[{\"command\":[\"/cluster-proportional-autoscaler\",\"--namespace=kube-system\",\"--configmap=kube-dns-autoscaler\",\"--target=Deployment/kube-dns\",\"--default-params={\\\"linear\\\":{\\\"coresPerReplica\\\":256,\\\"nodesPerReplica\\\":16,\\\"preventSinglePointFailure\\\":true,\\\"includeUnschedulableNodes\\\":true}}\",\"--logtostderr=true\",\"--v=2\"],\"image\":\"gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0\",\"name\":\"autoscaler\",\"resources\":{\"requests\":{\"cpu\":\"20m\",\"memory\":\"10Mi\"}}}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"fsGroup\":65534,\"seccompProfile\":{\"type\":\"RuntimeDefault\"},\"supplementalGroups\":[65534]},\"serviceAccountName\":\"kube-dns-autoscaler\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-dns-autoscaler", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"autoscaler\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:fsGroup": {}, - "f:supplementalGroups": {} - }, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:02:52Z" - } - ], - "name": "kube-dns-autoscaler", - "namespace": "kube-system", - "resourceVersion": "53108562", - "uid": "c84ce079-f3c8-46ba-871f-0f2d42ffee1e" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-dns-autoscaler" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/cluster-proportional-autoscaler", - "--namespace=kube-system", - "--configmap=kube-dns-autoscaler", - "--target=Deployment/kube-dns", - "--default-params={\"linear\":{\"coresPerReplica\":256,\"nodesPerReplica\":16,\"preventSinglePointFailure\":true,\"includeUnschedulableNodes\":true}}", - "--logtostderr=true", - "--v=2" - ], - "image": "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "autoscaler", - "resources": { - "requests": { - "cpu": "20m", - "memory": "10Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "fsGroup": 65534, - "seccompProfile": { - "type": "RuntimeDefault" - }, - "supplementalGroups": [ - 65534 - ] - }, - "serviceAccount": "kube-dns-autoscaler", - "serviceAccountName": "kube-dns-autoscaler", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:54:39Z", - "message": "ReplicaSet \"kube-dns-autoscaler-844c9d9448\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:02:52Z", - "lastUpdateTime": "2021-09-25T17:02:52Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"glbc\",\"kubernetes.io/cluster-service\":\"true\",\"kubernetes.io/name\":\"GLBC\"},\"name\":\"l7-default-backend\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"glbc\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"glbc\",\"name\":\"glbc\"}},\"spec\":{\"containers\":[{\"image\":\"k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":30,\"timeoutSeconds\":5},\"name\":\"default-http-backend\",\"ports\":[{\"containerPort\":8080}],\"resources\":{\"limits\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"20Mi\"}}}],\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"tolerations\":[{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:19Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "glbc", - "kubernetes.io/cluster-service": "true", - "kubernetes.io/name": "GLBC" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:kubernetes.io/name": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:name": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"default-http-backend\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":8080,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": { - ".": {}, - "f:seccompProfile": { - "f:type": {} - } - }, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:19Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:01:20Z" - } - ], - "name": "l7-default-backend", - "namespace": "kube-system", - "resourceVersion": "53107969", - "uid": "32a76c03-37a1-44e9-b293-dd6b46ed274b" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "glbc" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "glbc", - "name": "glbc" - } - }, - "spec": { - "containers": [ - { - "image": "k8s.gcr.io/networking/ingress-gce-404-server-with-metrics-amd64:v1.10.11", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "path": "/healthz", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 30, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "default-http-backend", - "ports": [ - { - "containerPort": 8080, - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "10m", - "memory": "20Mi" - }, - "requests": { - "cpu": "10m", - "memory": "20Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "ClusterFirst", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-06-13T13:42:19Z", - "lastUpdateTime": "2021-07-30T14:56:25Z", - "message": "ReplicaSet \"l7-default-backend-56cb9644f6\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - }, - { - "lastTransitionTime": "2021-09-25T17:01:20Z", - "lastUpdateTime": "2021-09-25T17:01:20Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - } - ], - "observedGeneration": 2, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "Deployment", - "metadata": { - "annotations": { - "deployment.kubernetes.io/revision": "24", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metrics-server\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server-v0.3.6\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metrics-server\",\"version\":\"v0.3.6\"},\"name\":\"metrics-server\"},\"spec\":{\"containers\":[{\"command\":[\"/metrics-server\",\"--metric-resolution=30s\",\"--kubelet-port=10255\",\"--deprecated-kubelet-completely-insecure=true\",\"--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP\"],\"image\":\"k8s.gcr.io/metrics-server-amd64:v0.3.6\",\"name\":\"metrics-server\",\"ports\":[{\"containerPort\":443,\"name\":\"https\",\"protocol\":\"TCP\"}]},{\"command\":[\"/pod_nanny\",\"--config-dir=/etc/config\",\"--cpu=40m\",\"--extra-cpu=0.5m\",\"--memory=35Mi\",\"--extra-memory=4Mi\",\"--threshold=5\",\"--deployment=metrics-server-v0.3.6\",\"--container=metrics-server\",\"--poll-period=300000\",\"--estimator=exponential\",\"--scale-down-delay=24h\",\"--minClusterSize=5\",\"--use-metrics=true\"],\"env\":[{\"name\":\"MY_POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"MY_POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"gke.gcr.io/addon-resizer:1.8.11-gke.0\",\"name\":\"metrics-server-nanny\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"300Mi\"},\"requests\":{\"cpu\":\"5m\",\"memory\":\"50Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"metrics-server-config-volume\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"securityContext\":{\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"metrics-server\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"configMap\":{\"name\":\"metrics-server-config\"},\"name\":\"metrics-server-config-volume\"}]}}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 24, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metrics-server", - "kubernetes.io/cluster-service": "true", - "version": "v0.3.6" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:progressDeadlineSeconds": {}, - "f:replicas": {}, - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:strategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxSurge": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - }, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:version": {} - }, - "f:name": {} - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":443,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - }, - "k:{\"name\":\"metrics-server-nanny\"}": { - ".": {}, - "f:command": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"MY_POD_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - }, - "k:{\"name\":\"MY_POD_NAMESPACE\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/config\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"metrics-server-config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metrics-server\"}": { - "f:resources": { - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - } - } - } - } - } - } - }, - "manager": "pod_nanny", - "operation": "Update", - "time": "2021-06-13T13:42:47Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:securityContext": { - "f:seccompProfile": { - ".": {}, - "f:type": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-26T17:13:37Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:deployment.kubernetes.io/revision": {} - } - }, - "f:status": { - "f:availableReplicas": {}, - "f:conditions": { - ".": {}, - "k:{\"type\":\"Available\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Progressing\"}": { - ".": {}, - "f:lastTransitionTime": {}, - "f:lastUpdateTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:observedGeneration": {}, - "f:readyReplicas": {}, - "f:replicas": {}, - "f:updatedReplicas": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-26T17:13:52Z" - } - ], - "name": "metrics-server-v0.3.6", - "namespace": "kube-system", - "resourceVersion": "53582788", - "uid": "872d0f34-7998-45d3-9eea-570e0a47e03c" - }, - "spec": { - "progressDeadlineSeconds": 600, - "replicas": 1, - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - } - }, - "strategy": { - "rollingUpdate": { - "maxSurge": "25%", - "maxUnavailable": "25%" - }, - "type": "RollingUpdate" - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metrics-server", - "version": "v0.3.6" - }, - "name": "metrics-server" - }, - "spec": { - "containers": [ - { - "command": [ - "/metrics-server", - "--metric-resolution=30s", - "--kubelet-port=10255", - "--deprecated-kubelet-completely-insecure=true", - "--kubelet-preferred-address-types=InternalIP,Hostname,InternalDNS,ExternalDNS,ExternalIP" - ], - "image": "k8s.gcr.io/metrics-server-amd64:v0.3.6", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server", - "ports": [ - { - "containerPort": 443, - "name": "https", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "44m", - "memory": "63Mi" - }, - "requests": { - "cpu": "44m", - "memory": "63Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - }, - { - "command": [ - "/pod_nanny", - "--config-dir=/etc/config", - "--cpu=40m", - "--extra-cpu=0.5m", - "--memory=35Mi", - "--extra-memory=4Mi", - "--threshold=5", - "--deployment=metrics-server-v0.3.6", - "--container=metrics-server", - "--poll-period=300000", - "--estimator=exponential", - "--scale-down-delay=24h", - "--minClusterSize=5", - "--use-metrics=true" - ], - "env": [ - { - "name": "MY_POD_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.name" - } - } - }, - { - "name": "MY_POD_NAMESPACE", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "metadata.namespace" - } - } - } - ], - "image": "gke.gcr.io/addon-resizer:1.8.11-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "metrics-server-nanny", - "resources": { - "limits": { - "cpu": "100m", - "memory": "300Mi" - }, - "requests": { - "cpu": "5m", - "memory": "50Mi" - } - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/config", - "name": "metrics-server-config-volume" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-cluster-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": { - "seccompProfile": { - "type": "RuntimeDefault" - } - }, - "serviceAccount": "metrics-server", - "serviceAccountName": "metrics-server", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "configMap": { - "defaultMode": 420, - "name": "metrics-server-config" - }, - "name": "metrics-server-config-volume" - } - ] - } - } - }, - "status": { - "availableReplicas": 1, - "conditions": [ - { - "lastTransitionTime": "2021-09-25T17:12:33Z", - "lastUpdateTime": "2021-09-25T17:12:33Z", - "message": "Deployment has minimum availability.", - "reason": "MinimumReplicasAvailable", - "status": "True", - "type": "Available" - }, - { - "lastTransitionTime": "2021-06-13T13:42:20Z", - "lastUpdateTime": "2021-09-26T17:13:52Z", - "message": "ReplicaSet \"metrics-server-v0.3.6-7889654bbb\" has successfully progressed.", - "reason": "NewReplicaSetAvailable", - "status": "True", - "type": "Progressing" - } - ], - "observedGeneration": 24, - "readyReplicas": 1, - "replicas": 1, - "updatedReplicas": 1 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "6", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"kube-proxy\"},\"name\":\"kube-proxy\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"kube-proxy\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"kube-proxy\"}},\"spec\":{\"containers\":[{\"command\":[\"/bin/sh\",\"-c\",\"kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\\u003e\\u003e/var/log/kube-proxy.log 2\\u003e\\u00261\"],\"env\":[{\"name\":\"KUBERNETES_SERVICE_HOST\",\"value\":\"34.78.97.243\"}],\"image\":\"gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001\",\"name\":\"kube-proxy\",\"resources\":{\"requests\":{\"cpu\":\"100m\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/log\",\"name\":\"varlog\",\"readOnly\":false},{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/lib/modules\",\"name\":\"lib-modules\",\"readOnly\":true}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\",\"node.kubernetes.io/kube-proxy-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"kube-proxy\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/log\"},\"name\":\"varlog\"},{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"hostPath\":{\"path\":\"/lib/modules\"},\"name\":\"lib-modules\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:28Z", - "generation": 6, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "kube-proxy" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBERNETES_SERVICE_HOST\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/kube-proxy-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:28Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - "f:command": {}, - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:44Z" - } - ], - "name": "kube-proxy", - "namespace": "kube-system", - "resourceVersion": "52161714", - "uid": "bb6f9ab0-e586-407b-95c0-773637c696e8" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "kube-proxy" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "kube-proxy" - } - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "kube-proxy --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,EfficientWatchResumption=true --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "env": [ - { - "name": "KUBERNETES_SERVICE_HOST", - "value": "34.78.97.243" - } - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux", - "node.kubernetes.io/kube-proxy-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "kube-proxy", - "serviceAccountName": "kube-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 6 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "3", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"},\"name\":\"metadata-proxy-v0.1\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metadata-proxy\",\"version\":\"v0.1\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metadata-proxy\",\"kubernetes.io/cluster-service\":\"true\",\"version\":\"v0.1\"}},\"spec\":{\"containers\":[{\"args\":[\"--addr=0.0.0.0:988\"],\"image\":\"k8s.gcr.io/metadata-proxy:v0.1.12\",\"name\":\"metadata-proxy\",\"resources\":{\"limits\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"},\"requests\":{\"cpu\":\"30m\",\"memory\":\"25Mi\"}},\"securityContext\":{\"privileged\":true}}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"cloud.google.com/metadata-proxy-ready\":\"true\",\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"metadata-proxy\",\"terminationGracePeriodSeconds\":30,\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:20Z", - "generation": 3, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:20Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {}, - "f:version": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - ".": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {} - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:cloud.google.com/metadata-proxy-ready": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {} - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T14:55:08Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"metadata-proxy\"}": { - "f:args": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:37Z" - } - ], - "name": "metadata-proxy-v0.1", - "namespace": "kube-system", - "resourceVersion": "25934435", - "uid": "94bf5845-f77b-47d4-bcec-e78549b4d8a3" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "metadata-proxy", - "version": "v0.1" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "metadata-proxy", - "kubernetes.io/cluster-service": "true", - "version": "v0.1" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--addr=0.0.0.0:988" - ], - "image": "k8s.gcr.io/metadata-proxy:v0.1.12", - "imagePullPolicy": "IfNotPresent", - "name": "metadata-proxy", - "resources": { - "limits": { - "cpu": "30m", - "memory": "25Mi" - }, - "requests": { - "cpu": "30m", - "memory": "25Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File" - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "cloud.google.com/metadata-proxy-ready": "true", - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "metadata-proxy", - "serviceAccountName": "metadata-proxy", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 3 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"node-local-dns\",\"kubernetes.io/cluster-service\":\"true\"},\"name\":\"node-local-dns\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"node-local-dns\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"nodelocaldns\",\"components.gke.io/component-version\":\"1.4.0\",\"prometheus.io/port\":\"9253\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"k8s-app\":\"node-local-dns\"}},\"spec\":{\"containers\":[{\"args\":[\"-localip\",\"169.254.20.10,10.72.0.10\",\"-conf\",\"/etc/Corefile\",\"-upstreamsvc\",\"kube-dns-upstream\",\"-kubednscm\",\"/etc/kube-dns\"],\"image\":\"gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1\",\"livenessProbe\":{\"httpGet\":{\"host\":\"169.254.20.10\",\"path\":\"/health\",\"port\":8080},\"initialDelaySeconds\":60,\"timeoutSeconds\":5},\"name\":\"node-cache\",\"ports\":[{\"containerPort\":53,\"name\":\"dns\",\"protocol\":\"UDP\"},{\"containerPort\":53,\"name\":\"dns-tcp\",\"protocol\":\"TCP\"},{\"containerPort\":9253,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"requests\":{\"cpu\":\"25m\",\"memory\":\"5Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/run/xtables.lock\",\"name\":\"xtables-lock\",\"readOnly\":false},{\"mountPath\":\"/etc/coredns\",\"name\":\"config-volume\"},{\"mountPath\":\"/etc/kube-dns\",\"name\":\"kube-dns-config\"}]}],\"dnsPolicy\":\"Default\",\"hostNetwork\":true,\"nodeSelector\":{\"addon.gke.io/node-local-dns-ds-ready\":\"true\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"node-local-dns\",\"tolerations\":[{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/run/xtables.lock\",\"type\":\"FileOrCreate\"},\"name\":\"xtables-lock\"},{\"configMap\":{\"name\":\"kube-dns\",\"optional\":true},\"name\":\"kube-dns-config\"},{\"configMap\":{\"items\":[{\"key\":\"Corefile\",\"path\":\"Corefile.base\"}],\"name\":\"node-local-dns\"},\"name\":\"config-volume\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"}}}}\n" - }, - "creationTimestamp": "2021-07-27T07:56:26Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "node-local-dns", - "kubernetes.io/cluster-service": "true" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {}, - "f:kubernetes.io/cluster-service": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - ".": {}, - "f:args": {}, - "f:imagePullPolicy": {}, - "f:livenessProbe": { - ".": {}, - "f:failureThreshold": {}, - "f:httpGet": { - ".": {}, - "f:host": {}, - "f:path": {}, - "f:port": {}, - "f:scheme": {} - }, - "f:initialDelaySeconds": {}, - "f:periodSeconds": {}, - "f:successThreshold": {}, - "f:timeoutSeconds": {} - }, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":53,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":53,\"protocol\":\"UDP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - }, - "k:{\"containerPort\":9253,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:hostPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/coredns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/kube-dns\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:addon.gke.io/node-local-dns-ds-ready": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"config-volume\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:items": {}, - "f:name": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kube-dns-config\"}": { - ".": {}, - "f:configMap": { - ".": {}, - "f:defaultMode": {}, - "f:name": {}, - "f:optional": {} - }, - "f:name": {} - }, - "k:{\"name\":\"xtables-lock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-07-27T07:56:26Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - } - }, - "f:spec": { - "f:template": { - "f:metadata": { - "f:annotations": { - "f:components.gke.io/component-version": {}, - "f:prometheus.io/port": {}, - "f:prometheus.io/scrape": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"node-cache\"}": { - "f:image": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-09-11T01:57:07Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "node-local-dns", - "namespace": "kube-system", - "resourceVersion": "53114241", - "uid": "5069e9ba-0784-41bf-9577-3757bcb3b6d6" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "node-local-dns" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "nodelocaldns", - "components.gke.io/component-version": "1.4.0", - "prometheus.io/port": "9253", - "prometheus.io/scrape": "true" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "node-local-dns" - } - }, - "spec": { - "containers": [ - { - "args": [ - "-localip", - "169.254.20.10,10.72.0.10", - "-conf", - "/etc/Corefile", - "-upstreamsvc", - "kube-dns-upstream", - "-kubednscm", - "/etc/kube-dns" - ], - "image": "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1", - "imagePullPolicy": "IfNotPresent", - "livenessProbe": { - "failureThreshold": 3, - "httpGet": { - "host": "169.254.20.10", - "path": "/health", - "port": 8080, - "scheme": "HTTP" - }, - "initialDelaySeconds": 60, - "periodSeconds": 10, - "successThreshold": 1, - "timeoutSeconds": 5 - }, - "name": "node-cache", - "ports": [ - { - "containerPort": 53, - "hostPort": 53, - "name": "dns", - "protocol": "UDP" - }, - { - "containerPort": 53, - "hostPort": 53, - "name": "dns-tcp", - "protocol": "TCP" - }, - { - "containerPort": 9253, - "hostPort": 9253, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "requests": { - "cpu": "25m", - "memory": "5Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/run/xtables.lock", - "name": "xtables-lock" - }, - { - "mountPath": "/etc/coredns", - "name": "config-volume" - }, - { - "mountPath": "/etc/kube-dns", - "name": "kube-dns-config" - } - ] - } - ], - "dnsPolicy": "Default", - "hostNetwork": true, - "nodeSelector": { - "addon.gke.io/node-local-dns-ds-ready": "true" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "node-local-dns", - "serviceAccountName": "node-local-dns", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "xtables-lock" - }, - { - "configMap": { - "defaultMode": 420, - "name": "kube-dns", - "optional": true - }, - "name": "kube-dns-config" - }, - { - "configMap": { - "defaultMode": 420, - "items": [ - { - "key": "Corefile", - "path": "Corefile.base" - } - ], - "name": "node-local-dns" - }, - "name": "config-volume" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 2, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "deprecated.daemonset.template.generation": "2", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"nvidia-gpu-device-plugin\"},\"name\":\"nvidia-gpu-device-plugin\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"nvidia-gpu-device-plugin\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"cloud.google.com/gke-accelerator\",\"operator\":\"Exists\"}]}]}}},\"containers\":[{\"command\":[\"/usr/bin/nvidia-gpu-device-plugin\",\"-logtostderr\",\"--enable-container-gpu-metrics\",\"--enable-health-monitoring\"],\"env\":[{\"name\":\"LD_LIBRARY_PATH\",\"value\":\"/usr/local/nvidia/lib64\"}],\"image\":\"gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317\",\"name\":\"nvidia-gpu-device-plugin\",\"ports\":[{\"containerPort\":2112,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/device-plugin\",\"name\":\"device-plugin\"},{\"mountPath\":\"/dev\",\"name\":\"dev\"},{\"mountPath\":\"/usr/local/nvidia\",\"name\":\"nvidia\"},{\"mountPath\":\"/var/lib/kubelet/pod-resources\",\"name\":\"pod-resources\"},{\"mountPath\":\"/proc\",\"name\":\"proc\"},{\"mountPath\":\"/etc/nvidia\",\"name\":\"nvidia-config\"}]}],\"priorityClassName\":\"system-node-critical\",\"tolerations\":[{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/device-plugins\"},\"name\":\"device-plugin\"},{\"hostPath\":{\"path\":\"/dev\"},\"name\":\"dev\"},{\"hostPath\":{\"path\":\"/home/kubernetes/bin/nvidia\",\"type\":\"Directory\"},\"name\":\"nvidia\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/pod-resources\"},\"name\":\"pod-resources\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"proc\"},{\"hostPath\":{\"path\":\"/etc/nvidia\"},\"name\":\"nvidia-config\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:17Z", - "generation": 2, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "nvidia-gpu-device-plugin" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:deprecated.daemonset.template.generation": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:affinity": { - ".": {}, - "f:nodeAffinity": { - ".": {}, - "f:requiredDuringSchedulingIgnoredDuringExecution": { - ".": {}, - "f:nodeSelectorTerms": {} - } - } - }, - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - ".": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"LD_LIBRARY_PATH\"}": { - ".": {}, - "f:name": {}, - "f:value": {} - } - }, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:ports": { - ".": {}, - "k:{\"containerPort\":2112,\"protocol\":\"TCP\"}": { - ".": {}, - "f:containerPort": {}, - "f:name": {}, - "f:protocol": {} - } - }, - "f:resources": { - ".": {}, - "f:limits": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - }, - "f:requests": { - ".": {}, - "f:cpu": {}, - "f:memory": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/device-plugin\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/local/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet/pod-resources\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"dev\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"device-plugin\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"nvidia\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"pod-resources\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:17Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - "f:addonmanager.kubernetes.io/mode": {} - } - }, - "f:spec": { - "f:template": { - "f:spec": { - "f:containers": { - "k:{\"name\":\"nvidia-gpu-device-plugin\"}": { - "f:command": {}, - "f:image": {}, - "f:volumeMounts": { - "k:{\"mountPath\":\"/etc/nvidia\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/proc\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:volumes": { - "k:{\"name\":\"nvidia-config\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"proc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - } - } - }, - "manager": "kubectl-client-side-apply", - "operation": "Update", - "time": "2021-07-30T14:54:41Z" - } - ], - "name": "nvidia-gpu-device-plugin", - "namespace": "kube-system", - "resourceVersion": "25934477", - "uid": "14396a20-ecee-4671-aefe-2a5b9d2e0dde" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "template": { - "metadata": { - "creationTimestamp": null, - "labels": { - "k8s-app": "nvidia-gpu-device-plugin" - } - }, - "spec": { - "affinity": { - "nodeAffinity": { - "requiredDuringSchedulingIgnoredDuringExecution": { - "nodeSelectorTerms": [ - { - "matchExpressions": [ - { - "key": "cloud.google.com/gke-accelerator", - "operator": "Exists" - } - ] - } - ] - } - } - }, - "containers": [ - { - "command": [ - "/usr/bin/nvidia-gpu-device-plugin", - "-logtostderr", - "--enable-container-gpu-metrics", - "--enable-health-monitoring" - ], - "env": [ - { - "name": "LD_LIBRARY_PATH", - "value": "/usr/local/nvidia/lib64" - } - ], - "image": "gcr.io/gke-release/nvidia-gpu-device-plugin@sha256:aa80c85c274a8e8f78110cae33cc92240d2f9b7efb3f53212f1cefd03de3c317", - "imagePullPolicy": "IfNotPresent", - "name": "nvidia-gpu-device-plugin", - "ports": [ - { - "containerPort": 2112, - "name": "metrics", - "protocol": "TCP" - } - ], - "resources": { - "limits": { - "cpu": "50m", - "memory": "20Mi" - }, - "requests": { - "cpu": "50m", - "memory": "20Mi" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/device-plugin", - "name": "device-plugin" - }, - { - "mountPath": "/dev", - "name": "dev" - }, - { - "mountPath": "/usr/local/nvidia", - "name": "nvidia" - }, - { - "mountPath": "/var/lib/kubelet/pod-resources", - "name": "pod-resources" - }, - { - "mountPath": "/proc", - "name": "proc" - }, - { - "mountPath": "/etc/nvidia", - "name": "nvidia-config" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/device-plugins", - "type": "" - }, - "name": "device-plugin" - }, - { - "hostPath": { - "path": "/dev", - "type": "" - }, - "name": "dev" - }, - { - "hostPath": { - "path": "/home/kubernetes/bin/nvidia", - "type": "Directory" - }, - "name": "nvidia" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/pod-resources", - "type": "" - }, - "name": "pod-resources" - }, - { - "hostPath": { - "path": "/proc", - "type": "" - }, - "name": "proc" - }, - { - "hostPath": { - "path": "/etc/nvidia", - "type": "" - }, - "name": "nvidia-config" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": 1 - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 2 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=/csi/csi.sock\",\"--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"securityContext\":{\"privileged\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/kubelet\",\"mountPropagation\":\"Bidirectional\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/dev\",\"name\":\"device-dir\"},{\"mountPath\":\"/etc/udev\",\"name\":\"udev-rules-etc\"},{\"mountPath\":\"/lib/udev\",\"name\":\"udev-rules-lib\"},{\"mountPath\":\"/run/udev\",\"name\":\"udev-socket\"},{\"mountPath\":\"/sys\",\"name\":\"sys\"}]}],\"hostNetwork\":true,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins_registry/\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"/var/lib/kubelet/plugins/pd.csi.storage.gke.io/\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"},{\"hostPath\":{\"path\":\"/dev\",\"type\":\"Directory\"},\"name\":\"device-dir\"},{\"hostPath\":{\"path\":\"/etc/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-etc\"},{\"hostPath\":{\"path\":\"/lib/udev\",\"type\":\"Directory\"},\"name\":\"udev-rules-lib\"},{\"hostPath\":{\"path\":\"/run/udev\",\"type\":\"Directory\"},\"name\":\"udev-socket\"},{\"hostPath\":{\"path\":\"/sys\",\"type\":\"Directory\"},\"name\":\"sys\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": {}, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/dev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/etc/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/lib/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/run/udev\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/sys\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/lib/kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:hostNetwork": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"device-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"sys\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-etc\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-rules-lib\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"udev-socket\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:currentNumberScheduled": {}, - "f:desiredNumberScheduled": {}, - "f:numberAvailable": {}, - "f:numberReady": {}, - "f:observedGeneration": {}, - "f:updatedNumberScheduled": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:18:10Z" - } - ], - "name": "pdcsi-node", - "namespace": "kube-system", - "resourceVersion": "53114246", - "uid": "d7222902-63f9-4586-ae5d-3d0cf2882dd5" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=/csi/csi.sock", - "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/var/lib/kubelet", - "mountPropagation": "Bidirectional", - "name": "kubelet-dir" - }, - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/dev", - "name": "device-dir" - }, - { - "mountPath": "/etc/udev", - "name": "udev-rules-etc" - }, - { - "mountPath": "/lib/udev", - "name": "udev-rules-lib" - }, - { - "mountPath": "/run/udev", - "name": "udev-socket" - }, - { - "mountPath": "/sys", - "name": "sys" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "hostNetwork": true, - "nodeSelector": { - "kubernetes.io/os": "linux" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/var/lib/kubelet/plugins_registry/", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "/var/lib/kubelet/plugins/pd.csi.storage.gke.io/", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - }, - { - "hostPath": { - "path": "/dev", - "type": "Directory" - }, - "name": "device-dir" - }, - { - "hostPath": { - "path": "/etc/udev", - "type": "Directory" - }, - "name": "udev-rules-etc" - }, - { - "hostPath": { - "path": "/lib/udev", - "type": "Directory" - }, - "name": "udev-rules-lib" - }, - { - "hostPath": { - "path": "/run/udev", - "type": "Directory" - }, - "name": "udev-socket" - }, - { - "hostPath": { - "path": "/sys", - "type": "Directory" - }, - "name": "sys" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 7, - "desiredNumberScheduled": 7, - "numberAvailable": 7, - "numberMisscheduled": 0, - "numberReady": 7, - "observedGeneration": 1, - "updatedNumberScheduled": 7 - } - }, - { - "apiVersion": "apps/v1", - "kind": "DaemonSet", - "metadata": { - "annotations": { - "components.gke.io/layer": "addon", - "deprecated.daemonset.template.generation": "1", - "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"components.gke.io/layer\":\"addon\"},\"labels\":{\"addonmanager.kubernetes.io/mode\":\"Reconcile\",\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"},\"name\":\"pdcsi-node-windows\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"template\":{\"metadata\":{\"annotations\":{\"components.gke.io/component-name\":\"pdcsi\",\"components.gke.io/component-version\":\"0.9.6\"},\"labels\":{\"k8s-app\":\"gcp-compute-persistent-disk-csi-driver\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=5\",\"--csi-address=unix://C:\\\\\\\\csi\\\\\\\\csi.sock\",\"--kubelet-registration-path=C:\\\\\\\\var\\\\\\\\lib\\\\\\\\kubelet\\\\\\\\plugins\\\\\\\\pd.csi.storage.gke.io\\\\\\\\csi.sock\"],\"env\":[{\"name\":\"KUBE_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0\",\"name\":\"csi-driver-registrar\",\"volumeMounts\":[{\"mountPath\":\"/csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"/registration\",\"name\":\"registration-dir\"}]},{\"args\":[\"--v=5\",\"--endpoint=unix:/csi/csi.sock\",\"--run-controller-service=false\"],\"image\":\"gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8\",\"name\":\"gce-pd-driver\",\"volumeMounts\":[{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\",\"mountPropagation\":\"None\",\"name\":\"kubelet-dir\"},{\"mountPath\":\"C:\\\\csi\",\"name\":\"plugin-dir\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"name\":\"csi-proxy-disk-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"name\":\"csi-proxy-volume-pipe\"},{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"name\":\"csi-proxy-filesystem-pipe\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"windows\"},\"priorityClassName\":\"system-node-critical\",\"serviceAccountName\":\"pdcsi-node-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"operator\":\"Exists\"},{\"effect\":\"NoExecute\",\"operator\":\"Exists\"},{\"key\":\"CriticalAddonsOnly\",\"operator\":\"Exists\"},{\"key\":\"components.gke.io/gke-managed-components\",\"operator\":\"Exists\"}],\"volumes\":[{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\",\"type\":\"\"},\"name\":\"csi-proxy-disk-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-volume-pipe\"},{\"hostPath\":{\"path\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\",\"type\":\"\"},\"name\":\"csi-proxy-filesystem-pipe\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins_registry\",\"type\":\"Directory\"},\"name\":\"registration-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\",\"type\":\"Directory\"},\"name\":\"kubelet-dir\"},{\"hostPath\":{\"path\":\"\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\",\"type\":\"DirectoryOrCreate\"},\"name\":\"plugin-dir\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"maxUnavailable\":\"10%\"},\"type\":\"RollingUpdate\"}}}\n" - }, - "creationTimestamp": "2021-06-13T13:42:24Z", - "generation": 1, - "labels": { - "addonmanager.kubernetes.io/mode": "Reconcile", - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - }, - "managedFields": [ - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:observedGeneration": {} - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - }, - { - "apiVersion": "apps/v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/layer": {}, - "f:deprecated.daemonset.template.generation": {}, - "f:kubectl.kubernetes.io/last-applied-configuration": {} - }, - "f:labels": { - ".": {}, - "f:addonmanager.kubernetes.io/mode": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:revisionHistoryLimit": {}, - "f:selector": { - "f:matchLabels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:template": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:components.gke.io/component-name": {}, - "f:components.gke.io/component-version": {} - }, - "f:labels": { - ".": {}, - "f:k8s-app": {} - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"csi-driver-registrar\"}": { - ".": {}, - "f:args": {}, - "f:env": { - ".": {}, - "k:{\"name\":\"KUBE_NODE_NAME\"}": { - ".": {}, - "f:name": {}, - "f:valueFrom": { - ".": {}, - "f:fieldRef": { - ".": {}, - "f:apiVersion": {}, - "f:fieldPath": {} - } - } - } - }, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/registration\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - }, - "k:{\"name\":\"gce-pd-driver\"}": { - ".": {}, - "f:args": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": {}, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"C:\\\\csi\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"C:\\\\var\\\\lib\\\\kubelet\"}": { - ".": {}, - "f:mountPath": {}, - "f:mountPropagation": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-disk-v1beta2\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-filesystem-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"\\\\\\\\.\\\\pipe\\\\csi-proxy-volume-v1beta1\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:nodeSelector": { - ".": {}, - "f:kubernetes.io/os": {} - }, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:serviceAccount": {}, - "f:serviceAccountName": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"csi-proxy-disk-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-filesystem-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"csi-proxy-volume-pipe\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubelet-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"plugin-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"registration-dir\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - } - }, - "f:updateStrategy": { - "f:rollingUpdate": { - ".": {}, - "f:maxUnavailable": {} - }, - "f:type": {} - } - } - }, - "manager": "kubectl", - "operation": "Update", - "time": "2021-06-13T13:42:24Z" - } - ], - "name": "pdcsi-node-windows", - "namespace": "kube-system", - "resourceVersion": "486", - "uid": "cb4f4186-87ba-4dff-8a0f-f1f12a355586" - }, - "spec": { - "revisionHistoryLimit": 10, - "selector": { - "matchLabels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "template": { - "metadata": { - "annotations": { - "components.gke.io/component-name": "pdcsi", - "components.gke.io/component-version": "0.9.6" - }, - "creationTimestamp": null, - "labels": { - "k8s-app": "gcp-compute-persistent-disk-csi-driver" - } - }, - "spec": { - "containers": [ - { - "args": [ - "--v=5", - "--csi-address=unix://C:\\\\csi\\\\csi.sock", - "--kubelet-registration-path=C:\\\\var\\\\lib\\\\kubelet\\\\plugins\\\\pd.csi.storage.gke.io\\\\csi.sock" - ], - "env": [ - { - "name": "KUBE_NODE_NAME", - "valueFrom": { - "fieldRef": { - "apiVersion": "v1", - "fieldPath": "spec.nodeName" - } - } - } - ], - "image": "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0", - "imagePullPolicy": "IfNotPresent", - "name": "csi-driver-registrar", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/csi", - "name": "plugin-dir" - }, - { - "mountPath": "/registration", - "name": "registration-dir" - } - ] - }, - { - "args": [ - "--v=5", - "--endpoint=unix:/csi/csi.sock", - "--run-controller-service=false" - ], - "image": "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8", - "imagePullPolicy": "IfNotPresent", - "name": "gce-pd-driver", - "resources": {}, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "C:\\var\\lib\\kubelet", - "mountPropagation": "None", - "name": "kubelet-dir" - }, - { - "mountPath": "C:\\csi", - "name": "plugin-dir" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "name": "csi-proxy-disk-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "name": "csi-proxy-volume-pipe" - }, - { - "mountPath": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "name": "csi-proxy-filesystem-pipe" - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "nodeSelector": { - "kubernetes.io/os": "windows" - }, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "serviceAccount": "pdcsi-node-sa", - "serviceAccountName": "pdcsi-node-sa", - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoSchedule", - "operator": "Exists" - }, - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "key": "CriticalAddonsOnly", - "operator": "Exists" - }, - { - "key": "components.gke.io/gke-managed-components", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-disk-v1beta2", - "type": "" - }, - "name": "csi-proxy-disk-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-volume-v1beta1", - "type": "" - }, - "name": "csi-proxy-volume-pipe" - }, - { - "hostPath": { - "path": "\\\\.\\pipe\\csi-proxy-filesystem-v1beta1", - "type": "" - }, - "name": "csi-proxy-filesystem-pipe" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins_registry", - "type": "Directory" - }, - "name": "registration-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet", - "type": "Directory" - }, - "name": "kubelet-dir" - }, - { - "hostPath": { - "path": "\\var\\lib\\kubelet\\plugins\\pd.csi.storage.gke.io", - "type": "DirectoryOrCreate" - }, - "name": "plugin-dir" - } - ] - } - }, - "updateStrategy": { - "rollingUpdate": { - "maxUnavailable": "10%" - }, - "type": "RollingUpdate" - } - }, - "status": { - "currentNumberScheduled": 0, - "desiredNumberScheduled": 0, - "numberMisscheduled": 0, - "numberReady": 0, - "observedGeneration": 1 - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:02:45.009201226Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:02:48Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"6de798cc-d558-479a-8ef4-38363e434633\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.63\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:02:55Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-5naq", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-5naq", - "uid": "6de798cc-d558-479a-8ef4-38363e434633" - } - ], - "resourceVersion": "53108585", - "uid": "fdd66d80-d09d-4b43-a291-b3797c7a5864" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-5naq", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:48Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:02:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://50767376b8a42b7a390e84c5c451d1485b1a562873b915100dc605bbcc49c1c5", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:02:48Z" - } - } - } - ], - "hostIP": "10.132.0.63", - "phase": "Running", - "podIP": "10.132.0.63", - "podIPs": [ - { - "ip": "10.132.0.63" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:02:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:09:05.595580038Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:09:09Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"d288c56c-2a00-42fe-b2ea-b8761fec2a4e\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.193\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:09:16Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-abj3", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-abj3", - "uid": "d288c56c-2a00-42fe-b2ea-b8761fec2a4e" - } - ], - "resourceVersion": "53110982", - "uid": "0866b060-d7a6-40bc-9ed9-292fbce958e9" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-abj3", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:09Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:09:06Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b04121a3de085254493b48dbe1be551abd021877d1c098afbd19e6429df8f4ba", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:09:08Z" - } - } - } - ], - "hostIP": "10.132.15.193", - "phase": "Running", - "podIP": "10.132.15.193", - "podIPs": [ - { - "ip": "10.132.15.193" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:09:06Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:56:27.195784979Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:56:29Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"9aa58d78-0147-4564-9900-0409a6bec341\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.61\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:56:37Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-enr8", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-enr8", - "uid": "9aa58d78-0147-4564-9900-0409a6bec341" - } - ], - "resourceVersion": "53106105", - "uid": "b940e7b5-9e7f-4ac7-a3ee-6c6655c1e65a" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-enr8", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:29Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:56:28Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://b9375aed4bc463ecfa5fcfb0cfb3b55d087416bfe0c3267c1395e8f93569d03c", - "image": "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:56:29Z" - } - } - } - ], - "hostIP": "10.132.0.61", - "phase": "Running", - "podIP": "10.132.0.61", - "podIPs": [ - { - "ip": "10.132.0.61" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:56:28Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T16:59:41.285621877Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T16:59:44Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"c1ab3c15-9764-40f5-ba6b-82556dc98ea2\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.0.62\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:59:52Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-oq2w", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-oq2w", - "uid": "c1ab3c15-9764-40f5-ba6b-82556dc98ea2" - } - ], - "resourceVersion": "53107378", - "uid": "19e52dea-6339-4ed7-8e32-3d39b242d133" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-oq2w", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:44Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T16:59:42Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://a0b27bef16953a38c48075124547583280bccf28d1d6cf54c3b3e754e2847c86", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T16:59:44Z" - } - } - } - ], - "hostIP": "10.132.0.62", - "phase": "Running", - "podIP": "10.132.0.62", - "podIPs": [ - { - "ip": "10.132.0.62" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T16:59:42Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:12:12.095932889Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:12:15Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"7042c0e8-8dc5-4d1d-8b36-92c692c31c76\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.194\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:12:22Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-rgdp", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-rgdp", - "uid": "7042c0e8-8dc5-4d1d-8b36-92c692c31c76" - } - ], - "resourceVersion": "53112149", - "uid": "5248c280-7bde-4fe9-a74e-56ae25abb0d2" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-rgdp", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:14Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:12:13Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://fd91ae480585a78c59ef401dc852d58921e76693ecbd908d98e4b63da6c298ff", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:12:14Z" - } - } - } - ], - "hostIP": "10.132.15.194", - "phase": "Running", - "podIP": "10.132.15.194", - "podIPs": [ - { - "ip": "10.132.15.194" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:12:13Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:05:45.558688986Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:05:49Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"a58f61e7-9d9e-4266-90d4-16b9969cb373\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.192\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:05:56Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-x940", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-x940", - "uid": "a58f61e7-9d9e-4266-90d4-16b9969cb373" - } - ], - "resourceVersion": "53109692", - "uid": "71a05734-f741-4b7e-82fe-765c555b3607" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-x940", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:49Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:05:46Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://6abab671623159f7174321118f58600f8955267a139a72508e9a73631ef7920d", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:05:48Z" - } - } - } - ], - "hostIP": "10.132.15.192", - "phase": "Running", - "podIP": "10.132.15.192", - "podIPs": [ - { - "ip": "10.132.15.192" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:05:46Z" - } - }, - { - "apiVersion": "v1", - "kind": "Pod", - "metadata": { - "annotations": { - "kubernetes.io/config.hash": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.mirror": "86bcd0ef96bf1e80b06e297d3654356c", - "kubernetes.io/config.seen": "2021-09-25T17:15:06.466708143Z", - "kubernetes.io/config.source": "file" - }, - "creationTimestamp": "2021-09-25T17:15:10Z", - "labels": { - "component": "kube-proxy", - "tier": "node" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:kubernetes.io/config.hash": {}, - "f:kubernetes.io/config.mirror": {}, - "f:kubernetes.io/config.seen": {}, - "f:kubernetes.io/config.source": {} - }, - "f:labels": { - ".": {}, - "f:component": {}, - "f:tier": {} - }, - "f:ownerReferences": { - ".": {}, - "k:{\"uid\":\"65f37105-dd71-428b-bf8b-0e82b88027f1\"}": { - ".": {}, - "f:apiVersion": {}, - "f:controller": {}, - "f:kind": {}, - "f:name": {}, - "f:uid": {} - } - } - }, - "f:spec": { - "f:containers": { - "k:{\"name\":\"kube-proxy\"}": { - ".": {}, - "f:command": {}, - "f:image": {}, - "f:imagePullPolicy": {}, - "f:name": {}, - "f:resources": { - ".": {}, - "f:requests": { - ".": {}, - "f:cpu": {} - } - }, - "f:securityContext": { - ".": {}, - "f:privileged": {} - }, - "f:terminationMessagePath": {}, - "f:terminationMessagePolicy": {}, - "f:volumeMounts": { - ".": {}, - "k:{\"mountPath\":\"/etc/ssl/certs\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/lib/modules\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/run/xtables.lock\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/usr/share/ca-certificates\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {}, - "f:readOnly": {} - }, - "k:{\"mountPath\":\"/var/lib/kube-proxy/kubeconfig\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - }, - "k:{\"mountPath\":\"/var/log\"}": { - ".": {}, - "f:mountPath": {}, - "f:name": {} - } - } - } - }, - "f:dnsPolicy": {}, - "f:enableServiceLinks": {}, - "f:hostNetwork": {}, - "f:nodeName": {}, - "f:priority": {}, - "f:priorityClassName": {}, - "f:restartPolicy": {}, - "f:schedulerName": {}, - "f:securityContext": {}, - "f:terminationGracePeriodSeconds": {}, - "f:tolerations": {}, - "f:volumes": { - ".": {}, - "k:{\"name\":\"etc-ssl-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"iptableslock\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"kubeconfig\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"lib-modules\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"usr-ca-certs\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - }, - "k:{\"name\":\"varlog\"}": { - ".": {}, - "f:hostPath": { - ".": {}, - "f:path": {}, - "f:type": {} - }, - "f:name": {} - } - } - }, - "f:status": { - "f:conditions": { - ".": {}, - "k:{\"type\":\"ContainersReady\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Initialized\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"PodScheduled\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastProbeTime": {}, - "f:lastTransitionTime": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:containerStatuses": {}, - "f:hostIP": {}, - "f:phase": {}, - "f:podIP": {}, - "f:podIPs": { - ".": {}, - "k:{\"ip\":\"10.132.15.195\"}": { - ".": {}, - "f:ip": {} - } - }, - "f:startTime": {} - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:15:17Z" - } - ], - "name": "kube-proxy-gke-leonid-cluster-default-pool-98608036-zzyg", - "namespace": "kube-system", - "ownerReferences": [ - { - "apiVersion": "v1", - "controller": true, - "kind": "Node", - "name": "gke-leonid-cluster-default-pool-98608036-zzyg", - "uid": "65f37105-dd71-428b-bf8b-0e82b88027f1" - } - ], - "resourceVersion": "53113200", - "uid": "dac23622-ae54-4a1a-a6ca-3c020911966e" - }, - "spec": { - "containers": [ - { - "command": [ - "/bin/sh", - "-c", - "exec kube-proxy --master=https://34.78.97.243 --kubeconfig=/var/lib/kube-proxy/kubeconfig --cluster-cidr=10.68.0.0/14 --oom-score-adj=-998 --v=2 --feature-gates=DynamicKubeletConfig=false,RotateKubeletServerCertificate=true,ExecProbeTimeout=false --iptables-sync-period=1m --iptables-min-sync-period=10s --ipvs-sync-period=1m --ipvs-min-sync-period=10s --detect-local-mode=NodeCIDR 1\u003e\u003e/var/log/kube-proxy.log 2\u003e\u00261" - ], - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imagePullPolicy": "IfNotPresent", - "name": "kube-proxy", - "resources": { - "requests": { - "cpu": "100m" - } - }, - "securityContext": { - "privileged": true - }, - "terminationMessagePath": "/dev/termination-log", - "terminationMessagePolicy": "File", - "volumeMounts": [ - { - "mountPath": "/etc/ssl/certs", - "name": "etc-ssl-certs", - "readOnly": true - }, - { - "mountPath": "/usr/share/ca-certificates", - "name": "usr-ca-certs", - "readOnly": true - }, - { - "mountPath": "/var/log", - "name": "varlog" - }, - { - "mountPath": "/var/lib/kube-proxy/kubeconfig", - "name": "kubeconfig" - }, - { - "mountPath": "/run/xtables.lock", - "name": "iptableslock" - }, - { - "mountPath": "/lib/modules", - "name": "lib-modules", - "readOnly": true - } - ] - } - ], - "dnsPolicy": "ClusterFirst", - "enableServiceLinks": true, - "hostNetwork": true, - "nodeName": "gke-leonid-cluster-default-pool-98608036-zzyg", - "preemptionPolicy": "PreemptLowerPriority", - "priority": 2000001000, - "priorityClassName": "system-node-critical", - "restartPolicy": "Always", - "schedulerName": "default-scheduler", - "securityContext": {}, - "terminationGracePeriodSeconds": 30, - "tolerations": [ - { - "effect": "NoExecute", - "operator": "Exists" - }, - { - "effect": "NoSchedule", - "operator": "Exists" - } - ], - "volumes": [ - { - "hostPath": { - "path": "/usr/share/ca-certificates", - "type": "" - }, - "name": "usr-ca-certs" - }, - { - "hostPath": { - "path": "/etc/ssl/certs", - "type": "" - }, - "name": "etc-ssl-certs" - }, - { - "hostPath": { - "path": "/var/lib/kube-proxy/kubeconfig", - "type": "FileOrCreate" - }, - "name": "kubeconfig" - }, - { - "hostPath": { - "path": "/var/log", - "type": "" - }, - "name": "varlog" - }, - { - "hostPath": { - "path": "/run/xtables.lock", - "type": "FileOrCreate" - }, - "name": "iptableslock" - }, - { - "hostPath": { - "path": "/lib/modules", - "type": "" - }, - "name": "lib-modules" - } - ] - }, - "status": { - "conditions": [ - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "Initialized" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "Ready" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:10Z", - "status": "True", - "type": "ContainersReady" - }, - { - "lastProbeTime": null, - "lastTransitionTime": "2021-09-25T17:15:07Z", - "status": "True", - "type": "PodScheduled" - } - ], - "containerStatuses": [ - { - "containerID": "containerd://ee309dad5cb7047fcbd7eb0401760ccb4bd986080ab11c860911e37b132a2a5c", - "image": "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "imageID": "sha256:f6d6ca78001a26353ca3b170c316901ab5127fa5d39fb2b13bb6eaa3e84dcf90", - "lastState": {}, - "name": "kube-proxy", - "ready": true, - "restartCount": 0, - "started": true, - "state": { - "running": { - "startedAt": "2021-09-25T17:15:09Z" - } - } - } - ], - "hostIP": "10.132.15.195", - "phase": "Running", - "podIP": "10.132.15.195", - "podIPs": [ - { - "ip": "10.132.15.195" - } - ], - "qosClass": "Burstable", - "startTime": "2021-09-25T17:15:07Z" - } - }, - { - "apiVersion": "v1", - "kind": "Node", - "metadata": { - "annotations": { - "container.googleapis.com/instance_id": "8018159819739556065", - "csi.volume.kubernetes.io/nodeid": "{\"pd.csi.storage.gke.io\":\"projects/elated-pottery-310110/zones/europe-west1-d/instances/gke-leonid-cluster-default-pool-98608036-5naq\"}", - "node.alpha.kubernetes.io/ttl": "0", - "node.gke.io/last-applied-node-labels": "addon.gke.io/node-local-dns-ds-ready=true,cloud.google.com/gke-boot-disk=pd-standard,cloud.google.com/gke-container-runtime=containerd,cloud.google.com/gke-nodepool=default-pool,cloud.google.com/gke-os-distribution=cos,cloud.google.com/machine-family=e2", - "volumes.kubernetes.io/controller-managed-attach-detach": "true" - }, - "creationTimestamp": "2021-09-25T17:02:47Z", - "labels": { - "addon.gke.io/node-local-dns-ds-ready": "true", - "beta.kubernetes.io/arch": "amd64", - "beta.kubernetes.io/instance-type": "e2-medium", - "beta.kubernetes.io/os": "linux", - "cloud.google.com/gke-boot-disk": "pd-standard", - "cloud.google.com/gke-container-runtime": "containerd", - "cloud.google.com/gke-nodepool": "default-pool", - "cloud.google.com/gke-os-distribution": "cos", - "cloud.google.com/machine-family": "e2", - "failure-domain.beta.kubernetes.io/region": "europe-west1", - "failure-domain.beta.kubernetes.io/zone": "europe-west1-d", - "kubernetes.io/arch": "amd64", - "kubernetes.io/hostname": "gke-leonid-cluster-default-pool-98608036-5naq", - "kubernetes.io/os": "linux", - "node.kubernetes.io/instance-type": "e2-medium", - "topology.gke.io/zone": "europe-west1-d", - "topology.kubernetes.io/region": "europe-west1", - "topology.kubernetes.io/zone": "europe-west1-d" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:node.alpha.kubernetes.io/ttl": {} - } - }, - "f:spec": { - "f:podCIDR": {}, - "f:podCIDRs": { - ".": {}, - "v:\"10.68.1.0/24\"": {} - } - }, - "f:status": { - "f:conditions": { - "k:{\"type\":\"NetworkUnavailable\"}": { - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {} - } - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:02:47Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:container.googleapis.com/instance_id": {}, - "f:node.gke.io/last-applied-node-labels": {} - }, - "f:labels": { - "f:addon.gke.io/node-local-dns-ds-ready": {}, - "f:cloud.google.com/gke-boot-disk": {}, - "f:cloud.google.com/gke-container-runtime": {}, - "f:cloud.google.com/gke-nodepool": {}, - "f:cloud.google.com/gke-os-distribution": {}, - "f:cloud.google.com/machine-family": {} - } - } - }, - "manager": "gcp-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:02:48Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:conditions": { - "k:{\"type\":\"CorruptDockerOverlay2\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentContainerdRestart\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentDockerRestart\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentKubeletRestart\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentUnregisterNetDevice\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"KernelDeadlock\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"ReadonlyFilesystem\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - } - } - }, - "manager": "node-problem-detector", - "operation": "Update", - "time": "2021-09-25T17:02:48Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:csi.volume.kubernetes.io/nodeid": {}, - "f:volumes.kubernetes.io/controller-managed-attach-detach": {} - }, - "f:labels": { - ".": {}, - "f:beta.kubernetes.io/arch": {}, - "f:beta.kubernetes.io/instance-type": {}, - "f:beta.kubernetes.io/os": {}, - "f:failure-domain.beta.kubernetes.io/region": {}, - "f:failure-domain.beta.kubernetes.io/zone": {}, - "f:kubernetes.io/arch": {}, - "f:kubernetes.io/hostname": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/instance-type": {}, - "f:topology.gke.io/zone": {}, - "f:topology.kubernetes.io/region": {}, - "f:topology.kubernetes.io/zone": {} - } - }, - "f:spec": { - "f:providerID": {} - }, - "f:status": { - "f:addresses": { - ".": {}, - "k:{\"type\":\"ExternalIP\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - }, - "k:{\"type\":\"Hostname\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - }, - "k:{\"type\":\"InternalDNS\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - }, - "k:{\"type\":\"InternalIP\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - } - }, - "f:allocatable": { - ".": {}, - "f:attachable-volumes-gce-pd": {}, - "f:cpu": {}, - "f:ephemeral-storage": {}, - "f:hugepages-1Gi": {}, - "f:hugepages-2Mi": {}, - "f:memory": {}, - "f:pods": {} - }, - "f:capacity": { - ".": {}, - "f:attachable-volumes-gce-pd": {}, - "f:cpu": {}, - "f:ephemeral-storage": {}, - "f:hugepages-1Gi": {}, - "f:hugepages-2Mi": {}, - "f:memory": {}, - "f:pods": {} - }, - "f:conditions": { - ".": {}, - "k:{\"type\":\"DiskPressure\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"MemoryPressure\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"NetworkUnavailable\"}": { - ".": {}, - "f:type": {} - }, - "k:{\"type\":\"PIDPressure\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:daemonEndpoints": { - "f:kubeletEndpoint": { - "f:Port": {} - } - }, - "f:images": {}, - "f:nodeInfo": { - "f:architecture": {}, - "f:bootID": {}, - "f:containerRuntimeVersion": {}, - "f:kernelVersion": {}, - "f:kubeProxyVersion": {}, - "f:kubeletVersion": {}, - "f:machineID": {}, - "f:operatingSystem": {}, - "f:osImage": {}, - "f:systemUUID": {} - } - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:03:00Z" - } - ], - "name": "gke-leonid-cluster-default-pool-98608036-5naq", - "resourceVersion": "61537532", - "uid": "6de798cc-d558-479a-8ef4-38363e434633" - }, - "spec": { - "podCIDR": "10.68.1.0/24", - "podCIDRs": [ - "10.68.1.0/24" - ], - "providerID": "gce://elated-pottery-310110/europe-west1-d/gke-leonid-cluster-default-pool-98608036-5naq" - }, - "status": { - "addresses": [ - { - "address": "10.132.0.63", - "type": "InternalIP" - }, - { - "address": "34.78.107.118", - "type": "ExternalIP" - }, - { - "address": "gke-leonid-cluster-default-pool-98608036-5naq.europe-west1-d.c.elated-pottery-310110.internal", - "type": "InternalDNS" - }, - { - "address": "gke-leonid-cluster-default-pool-98608036-5naq.europe-west1-d.c.elated-pottery-310110.internal", - "type": "Hostname" - } - ], - "allocatable": { - "attachable-volumes-gce-pd": "15", - "cpu": "940m", - "ephemeral-storage": "47093746742", - "hugepages-1Gi": "0", - "hugepages-2Mi": "0", - "memory": "2885772Ki", - "pods": "110" - }, - "capacity": { - "attachable-volumes-gce-pd": "15", - "cpu": "2", - "ephemeral-storage": "98868448Ki", - "hugepages-1Gi": "0", - "hugepages-2Mi": "0", - "memory": "4031628Ki", - "pods": "110" - }, - "conditions": [ - { - "lastHeartbeatTime": "2021-10-13T14:26:19Z", - "lastTransitionTime": "2021-09-25T17:02:47Z", - "message": "docker overlay2 is functioning properly", - "reason": "NoCorruptDockerOverlay2", - "status": "False", - "type": "CorruptDockerOverlay2" - }, - { - "lastHeartbeatTime": "2021-10-13T14:26:19Z", - "lastTransitionTime": "2021-09-25T17:02:47Z", - "message": "kubelet is functioning properly", - "reason": "NoFrequentKubeletRestart", - "status": "False", - "type": "FrequentKubeletRestart" - }, - { - "lastHeartbeatTime": "2021-10-13T14:26:19Z", - "lastTransitionTime": "2021-09-25T17:02:47Z", - "message": "docker is functioning properly", - "reason": "NoFrequentDockerRestart", - "status": "False", - "type": "FrequentDockerRestart" - }, - { - "lastHeartbeatTime": "2021-10-13T14:26:19Z", - "lastTransitionTime": "2021-09-25T17:02:47Z", - "message": "containerd is functioning properly", - "reason": "NoFrequentContainerdRestart", - "status": "False", - "type": "FrequentContainerdRestart" - }, - { - "lastHeartbeatTime": "2021-10-13T14:26:19Z", - "lastTransitionTime": "2021-09-25T17:02:47Z", - "message": "node is functioning properly", - "reason": "NoFrequentUnregisterNetDevice", - "status": "False", - "type": "FrequentUnregisterNetDevice" - }, - { - "lastHeartbeatTime": "2021-10-13T14:26:19Z", - "lastTransitionTime": "2021-09-25T17:02:47Z", - "message": "kernel has no deadlock", - "reason": "KernelHasNoDeadlock", - "status": "False", - "type": "KernelDeadlock" - }, - { - "lastHeartbeatTime": "2021-10-13T14:26:19Z", - "lastTransitionTime": "2021-09-25T17:02:47Z", - "message": "Filesystem is not read-only", - "reason": "FilesystemIsNotReadOnly", - "status": "False", - "type": "ReadonlyFilesystem" - }, - { - "lastHeartbeatTime": "2021-09-25T17:02:47Z", - "lastTransitionTime": "2021-09-25T17:02:47Z", - "message": "NodeController create implicit route", - "reason": "RouteCreated", - "status": "False", - "type": "NetworkUnavailable" - }, - { - "lastHeartbeatTime": "2021-10-13T14:28:04Z", - "lastTransitionTime": "2021-09-25T17:02:45Z", - "message": "kubelet has sufficient memory available", - "reason": "KubeletHasSufficientMemory", - "status": "False", - "type": "MemoryPressure" - }, - { - "lastHeartbeatTime": "2021-10-13T14:28:04Z", - "lastTransitionTime": "2021-09-25T17:02:45Z", - "message": "kubelet has no disk pressure", - "reason": "KubeletHasNoDiskPressure", - "status": "False", - "type": "DiskPressure" - }, - { - "lastHeartbeatTime": "2021-10-13T14:28:04Z", - "lastTransitionTime": "2021-09-25T17:02:45Z", - "message": "kubelet has sufficient PID available", - "reason": "KubeletHasSufficientPID", - "status": "False", - "type": "PIDPressure" - }, - { - "lastHeartbeatTime": "2021-10-13T14:28:04Z", - "lastTransitionTime": "2021-09-25T17:02:47Z", - "message": "kubelet is posting ready status. AppArmor enabled", - "reason": "KubeletReady", - "status": "True", - "type": "Ready" - } - ], - "daemonEndpoints": { - "kubeletEndpoint": { - "Port": 10250 - } - }, - "images": [ - { - "names": [ - "quay.io/armosec/k8s-ca-webhook-ubi@sha256:03467ff9b70c77f3c714fee7f4e67940d3a9950895e0d7308c6f99f87f31e71b", - "quay.io/armosec/k8s-ca-webhook-ubi:latest", - "quay.io/armosec/k8s-ca-webhook-ubi:606" - ], - "sizeBytes": 195758708 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/adservice@sha256:c79557830d4e3b25ff29946b191d2dee609a2475b6a64a7466ad6374ab7d4ded", - "gcr.io/google-samples/microservices-demo/adservice:v0.2.3" - ], - "sizeBytes": 180082580 - }, - { - "names": [ - "quay.io/armosec/k8s-ca-oracle-ubi@sha256:b645fd828f9776700770fb8ba9da664c08bf3b50baf4a5227ae71cb02a279787", - "quay.io/armosec/k8s-ca-oracle-ubi:latest" - ], - "sizeBytes": 165304873 - }, - { - "names": [ - "quay.io/armosec/k8s-ca-posture-ubi@sha256:81775d3de0965b034d1293ee53f6fd76cac25130d43ff4b376020fe12961a1f4", - "quay.io/armosec/k8s-ca-posture-ubi:latest" - ], - "sizeBytes": 143850331 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/recommendationservice@sha256:5f60c49888595555e7bbb16efa62ef3ec51efe0429c1eb4dd9acaf68f459ad13", - "gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3" - ], - "sizeBytes": 127474515 - }, - { - "names": [ - "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001" - ], - "sizeBytes": 103386207 - }, - { - "names": [ - "quay.io/armosec/demoservice@sha256:4646027c2d9ad8b5d3f3e72602050e3c565802e5b12ff77bf0dc9514fe81063e", - "quay.io/armosec/demoservice:v4-debian" - ], - "sizeBytes": 92619426 - }, - { - "names": [ - "quay.io/armosec/k8s-ca-ocimage@sha256:fe16cb622bf3b4258b6c75d03b8fe783499c5218634aa623c591dbbc244ec936", - "quay.io/armosec/k8s-ca-ocimage:latest" - ], - "sizeBytes": 86402738 - }, - { - "names": [ - "quay.io/armosec/k8s-ca-rbac-scanner-ubi@sha256:0674790908c817ad1a302c2afb4d07ececa157a89365ccdb089428c0c1ac8bf2", - "quay.io/armosec/k8s-ca-rbac-scanner-ubi:latest" - ], - "sizeBytes": 83276338 - }, - { - "names": [ - "gke.gcr.io/gcp-compute-persistent-disk-csi-driver@sha256:e9e3a3af496e330d473b7c5c42958de4ebc1c17fbbb311360b7ecdf7b28e1c93", - "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8" - ], - "sizeBytes": 74280698 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/currencyservice@sha256:49d458a3650f7f9d33e2509d152c540afeb1d9f50a66356331d898366ee71d68", - "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3" - ], - "sizeBytes": 53785764 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/paymentservice@sha256:6eb201217a8f3540043d5f64be96b4c3470207b9cc1ea315c1f186595da02db6", - "gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3" - ], - "sizeBytes": 52652022 - }, - { - "names": [ - "quay.io/armosec/k8s-ca-dashboard-aggregator-ubi@sha256:5a494a9b4a8f8df959f7cb478d4f92943ca347988d7fa84ae39bfd54bcdb4bc4", - "quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:latest" - ], - "sizeBytes": 48721386 - }, - { - "names": [ - "gke.gcr.io/k8s-dns-node-cache@sha256:4231096625a3eb88fb630badb69d15fe3ca2403db318e141072e950050307586", - "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1" - ], - "sizeBytes": 46401859 - }, - { - "names": [ - "quay.io/armosec/notification-server-ubi@sha256:4fc284ba63683e00468b92db20f51c1209ae475a6d0bd53c1b025964876d0eea", - "quay.io/armosec/notification-server-ubi:latest" - ], - "sizeBytes": 42127446 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/cartservice@sha256:566733b4d2d53d9af0cd3db9d267812ff78c8ffd4f49c68e8600eaf02fe285bc", - "gcr.io/google-samples/microservices-demo/cartservice:v0.2.3" - ], - "sizeBytes": 20500350 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/frontend@sha256:ca5c0f0771c89ec9dbfcbb4bfbbd9a048c25f7a625d97781920b35db6cecc19c", - "gcr.io/google-samples/microservices-demo/frontend:v0.2.3" - ], - "sizeBytes": 20370522 - }, - { - "names": [ - "gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:3b600d2d5eafa6d5fcedbd783b28694af3f7dd470f3580e83200244fab32b35e", - "eu.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:3b600d2d5eafa6d5fcedbd783b28694af3f7dd470f3580e83200244fab32b35e", - "asia.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:3b600d2d5eafa6d5fcedbd783b28694af3f7dd470f3580e83200244fab32b35e", - "gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "eu.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64:1.8.1-gke.0" - ], - "sizeBytes": 16833220 - }, - { - "names": [ - "gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:e3f48b3d1e49cfa3e7f002020769c9cd01cd0e77bbc99dc133c7ab0f8097e989", - "eu.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:e3f48b3d1e49cfa3e7f002020769c9cd01cd0e77bbc99dc133c7ab0f8097e989", - "asia.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:e3f48b3d1e49cfa3e7f002020769c9cd01cd0e77bbc99dc133c7ab0f8097e989", - "asia.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64:1.7.1-gke.0", - "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.7.1-gke.0" - ], - "sizeBytes": 16572417 - }, - { - "names": [ - "gcr.io/gke-release-staging/cpvpa-amd64@sha256:b802d79f207ea9cbc996cc208781ea34715fe796be68e5250da37b2ae73d42a6", - "asia.gcr.io/gke-release-staging/cpvpa-amd64@sha256:b802d79f207ea9cbc996cc208781ea34715fe796be68e5250da37b2ae73d42a6", - "eu.gcr.io/gke-release-staging/cpvpa-amd64@sha256:b802d79f207ea9cbc996cc208781ea34715fe796be68e5250da37b2ae73d42a6", - "gcr.io/gke-release-staging/cpvpa-amd64:v0.8.3-gke.0", - "asia.gcr.io/gke-release-staging/cpvpa-amd64:v0.8.3-gke.0" - ], - "sizeBytes": 16376177 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/productcatalogservice@sha256:5a4a0e54c6d01285ffc96a12caf0976c2297fc922896c17262828fcc9d0211bf", - "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3" - ], - "sizeBytes": 14630674 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/shippingservice@sha256:0cb1707fc503909e6744ad77fefabeed2e056d17ede3be3ced366800fb88e4da", - "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3" - ], - "sizeBytes": 14599818 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/checkoutservice@sha256:0fad1066de777eb37ebaae88afda058b8b9cb215f977b22a7bab508b5d56dc7d", - "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3" - ], - "sizeBytes": 14575100 - }, - { - "names": [ - "docker.io/library/redis@sha256:fa785f9bd167b94a6b30210ae32422469f4b0f805f4df12733c2f177f500d1ba", - "docker.io/library/redis:alpine" - ], - "sizeBytes": 10906243 - }, - { - "names": [ - "k8s.gcr.io/metrics-server-amd64@sha256:c9c4e95068b51d6b33a9dccc61875df07dc650abbf4ac1a19d58b4628f89288b", - "k8s.gcr.io/metrics-server-amd64:v0.3.6" - ], - "sizeBytes": 10542830 - } - ], - "nodeInfo": { - "architecture": "amd64", - "bootID": "6e48f3a5-b967-48d1-84e4-afa097649600", - "containerRuntimeVersion": "containerd://1.4.4", - "kernelVersion": "5.4.120+", - "kubeProxyVersion": "v1.20.9-gke.1001", - "kubeletVersion": "v1.20.9-gke.1001", - "machineID": "2830c8f8c38ae031451de7aaa6e3ad1e", - "operatingSystem": "linux", - "osImage": "Container-Optimized OS from Google", - "systemUUID": "2830c8f8-c38a-e031-451d-e7aaa6e3ad1e" - } - } - }, - { - "apiVersion": "v1", - "kind": "Node", - "metadata": { - "annotations": { - "container.googleapis.com/instance_id": "7800795532093483364", - "csi.volume.kubernetes.io/nodeid": "{\"pd.csi.storage.gke.io\":\"projects/elated-pottery-310110/zones/europe-west1-d/instances/gke-leonid-cluster-default-pool-98608036-abj3\"}", - "node.alpha.kubernetes.io/ttl": "0", - "node.gke.io/last-applied-node-labels": "addon.gke.io/node-local-dns-ds-ready=true,cloud.google.com/gke-boot-disk=pd-standard,cloud.google.com/gke-container-runtime=containerd,cloud.google.com/gke-nodepool=default-pool,cloud.google.com/gke-os-distribution=cos,cloud.google.com/machine-family=e2", - "volumes.kubernetes.io/controller-managed-attach-detach": "true" - }, - "creationTimestamp": "2021-09-25T17:09:07Z", - "labels": { - "addon.gke.io/node-local-dns-ds-ready": "true", - "beta.kubernetes.io/arch": "amd64", - "beta.kubernetes.io/instance-type": "e2-medium", - "beta.kubernetes.io/os": "linux", - "cloud.google.com/gke-boot-disk": "pd-standard", - "cloud.google.com/gke-container-runtime": "containerd", - "cloud.google.com/gke-nodepool": "default-pool", - "cloud.google.com/gke-os-distribution": "cos", - "cloud.google.com/machine-family": "e2", - "failure-domain.beta.kubernetes.io/region": "europe-west1", - "failure-domain.beta.kubernetes.io/zone": "europe-west1-d", - "kubernetes.io/arch": "amd64", - "kubernetes.io/hostname": "gke-leonid-cluster-default-pool-98608036-abj3", - "kubernetes.io/os": "linux", - "node.kubernetes.io/instance-type": "e2-medium", - "topology.gke.io/zone": "europe-west1-d", - "topology.kubernetes.io/region": "europe-west1", - "topology.kubernetes.io/zone": "europe-west1-d" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:container.googleapis.com/instance_id": {}, - "f:node.gke.io/last-applied-node-labels": {} - }, - "f:labels": { - "f:addon.gke.io/node-local-dns-ds-ready": {}, - "f:cloud.google.com/gke-boot-disk": {}, - "f:cloud.google.com/gke-container-runtime": {}, - "f:cloud.google.com/gke-nodepool": {}, - "f:cloud.google.com/gke-os-distribution": {}, - "f:cloud.google.com/machine-family": {} - } - } - }, - "manager": "gcp-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:09:08Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:node.alpha.kubernetes.io/ttl": {} - } - }, - "f:spec": { - "f:podCIDR": {}, - "f:podCIDRs": { - ".": {}, - "v:\"10.68.0.0/24\"": {} - } - }, - "f:status": { - "f:conditions": { - "k:{\"type\":\"NetworkUnavailable\"}": { - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {} - } - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:09:08Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:conditions": { - "k:{\"type\":\"CorruptDockerOverlay2\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentContainerdRestart\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentDockerRestart\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentKubeletRestart\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentUnregisterNetDevice\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"KernelDeadlock\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"ReadonlyFilesystem\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - } - } - }, - "manager": "node-problem-detector", - "operation": "Update", - "time": "2021-09-25T17:09:13Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:csi.volume.kubernetes.io/nodeid": {}, - "f:volumes.kubernetes.io/controller-managed-attach-detach": {} - }, - "f:labels": { - ".": {}, - "f:beta.kubernetes.io/arch": {}, - "f:beta.kubernetes.io/instance-type": {}, - "f:beta.kubernetes.io/os": {}, - "f:failure-domain.beta.kubernetes.io/region": {}, - "f:failure-domain.beta.kubernetes.io/zone": {}, - "f:kubernetes.io/arch": {}, - "f:kubernetes.io/hostname": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/instance-type": {}, - "f:topology.gke.io/zone": {}, - "f:topology.kubernetes.io/region": {}, - "f:topology.kubernetes.io/zone": {} - } - }, - "f:spec": { - "f:providerID": {} - }, - "f:status": { - "f:addresses": { - ".": {}, - "k:{\"type\":\"ExternalIP\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - }, - "k:{\"type\":\"Hostname\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - }, - "k:{\"type\":\"InternalDNS\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - }, - "k:{\"type\":\"InternalIP\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - } - }, - "f:allocatable": { - ".": {}, - "f:attachable-volumes-gce-pd": {}, - "f:cpu": {}, - "f:ephemeral-storage": {}, - "f:hugepages-1Gi": {}, - "f:hugepages-2Mi": {}, - "f:memory": {}, - "f:pods": {} - }, - "f:capacity": { - ".": {}, - "f:attachable-volumes-gce-pd": {}, - "f:cpu": {}, - "f:ephemeral-storage": {}, - "f:hugepages-1Gi": {}, - "f:hugepages-2Mi": {}, - "f:memory": {}, - "f:pods": {} - }, - "f:conditions": { - ".": {}, - "k:{\"type\":\"DiskPressure\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"MemoryPressure\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"NetworkUnavailable\"}": { - ".": {}, - "f:type": {} - }, - "k:{\"type\":\"PIDPressure\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:daemonEndpoints": { - "f:kubeletEndpoint": { - "f:Port": {} - } - }, - "f:images": {}, - "f:nodeInfo": { - "f:architecture": {}, - "f:bootID": {}, - "f:containerRuntimeVersion": {}, - "f:kernelVersion": {}, - "f:kubeProxyVersion": {}, - "f:kubeletVersion": {}, - "f:machineID": {}, - "f:operatingSystem": {}, - "f:osImage": {}, - "f:systemUUID": {} - } - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:09:19Z" - } - ], - "name": "gke-leonid-cluster-default-pool-98608036-abj3", - "resourceVersion": "61538123", - "uid": "d288c56c-2a00-42fe-b2ea-b8761fec2a4e" - }, - "spec": { - "podCIDR": "10.68.0.0/24", - "podCIDRs": [ - "10.68.0.0/24" - ], - "providerID": "gce://elated-pottery-310110/europe-west1-d/gke-leonid-cluster-default-pool-98608036-abj3" - }, - "status": { - "addresses": [ - { - "address": "10.132.15.193", - "type": "InternalIP" - }, - { - "address": "35.195.3.215", - "type": "ExternalIP" - }, - { - "address": "gke-leonid-cluster-default-pool-98608036-abj3.europe-west1-d.c.elated-pottery-310110.internal", - "type": "InternalDNS" - }, - { - "address": "gke-leonid-cluster-default-pool-98608036-abj3.europe-west1-d.c.elated-pottery-310110.internal", - "type": "Hostname" - } - ], - "allocatable": { - "attachable-volumes-gce-pd": "15", - "cpu": "940m", - "ephemeral-storage": "47093746742", - "hugepages-1Gi": "0", - "hugepages-2Mi": "0", - "memory": "2885772Ki", - "pods": "110" - }, - "capacity": { - "attachable-volumes-gce-pd": "15", - "cpu": "2", - "ephemeral-storage": "98868448Ki", - "hugepages-1Gi": "0", - "hugepages-2Mi": "0", - "memory": "4031628Ki", - "pods": "110" - }, - "conditions": [ - { - "lastHeartbeatTime": "2021-10-13T14:29:13Z", - "lastTransitionTime": "2021-09-25T17:09:12Z", - "message": "kubelet is functioning properly", - "reason": "NoFrequentKubeletRestart", - "status": "False", - "type": "FrequentKubeletRestart" - }, - { - "lastHeartbeatTime": "2021-10-13T14:29:13Z", - "lastTransitionTime": "2021-09-25T17:09:12Z", - "message": "docker is functioning properly", - "reason": "NoFrequentDockerRestart", - "status": "False", - "type": "FrequentDockerRestart" - }, - { - "lastHeartbeatTime": "2021-10-13T14:29:13Z", - "lastTransitionTime": "2021-09-25T17:09:12Z", - "message": "containerd is functioning properly", - "reason": "NoFrequentContainerdRestart", - "status": "False", - "type": "FrequentContainerdRestart" - }, - { - "lastHeartbeatTime": "2021-10-13T14:29:13Z", - "lastTransitionTime": "2021-09-25T17:09:12Z", - "message": "kernel has no deadlock", - "reason": "KernelHasNoDeadlock", - "status": "False", - "type": "KernelDeadlock" - }, - { - "lastHeartbeatTime": "2021-10-13T14:29:13Z", - "lastTransitionTime": "2021-09-25T17:09:12Z", - "message": "Filesystem is not read-only", - "reason": "FilesystemIsNotReadOnly", - "status": "False", - "type": "ReadonlyFilesystem" - }, - { - "lastHeartbeatTime": "2021-10-13T14:29:13Z", - "lastTransitionTime": "2021-09-25T17:09:13Z", - "message": "docker overlay2 is functioning properly", - "reason": "NoCorruptDockerOverlay2", - "status": "False", - "type": "CorruptDockerOverlay2" - }, - { - "lastHeartbeatTime": "2021-10-13T14:29:13Z", - "lastTransitionTime": "2021-09-25T17:09:12Z", - "message": "node is functioning properly", - "reason": "NoFrequentUnregisterNetDevice", - "status": "False", - "type": "FrequentUnregisterNetDevice" - }, - { - "lastHeartbeatTime": "2021-09-25T17:09:08Z", - "lastTransitionTime": "2021-09-25T17:09:08Z", - "message": "NodeController create implicit route", - "reason": "RouteCreated", - "status": "False", - "type": "NetworkUnavailable" - }, - { - "lastHeartbeatTime": "2021-10-13T14:29:55Z", - "lastTransitionTime": "2021-09-25T17:09:06Z", - "message": "kubelet has sufficient memory available", - "reason": "KubeletHasSufficientMemory", - "status": "False", - "type": "MemoryPressure" - }, - { - "lastHeartbeatTime": "2021-10-13T14:29:55Z", - "lastTransitionTime": "2021-09-25T17:09:06Z", - "message": "kubelet has no disk pressure", - "reason": "KubeletHasNoDiskPressure", - "status": "False", - "type": "DiskPressure" - }, - { - "lastHeartbeatTime": "2021-10-13T14:29:55Z", - "lastTransitionTime": "2021-09-25T17:09:06Z", - "message": "kubelet has sufficient PID available", - "reason": "KubeletHasSufficientPID", - "status": "False", - "type": "PIDPressure" - }, - { - "lastHeartbeatTime": "2021-10-13T14:29:55Z", - "lastTransitionTime": "2021-09-25T17:09:08Z", - "message": "kubelet is posting ready status. AppArmor enabled", - "reason": "KubeletReady", - "status": "True", - "type": "Ready" - } - ], - "daemonEndpoints": { - "kubeletEndpoint": { - "Port": 10250 - } - }, - "images": [ - { - "names": [ - "gcr.io/google-samples/microservices-demo/adservice@sha256:c79557830d4e3b25ff29946b191d2dee609a2475b6a64a7466ad6374ab7d4ded", - "gcr.io/google-samples/microservices-demo/adservice:v0.2.3" - ], - "sizeBytes": 180082580 - }, - { - "names": [ - "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001" - ], - "sizeBytes": 103386207 - }, - { - "names": [ - "quay.io/armosec/k8s-ca-vuln-scan-ubi@sha256:1f7559ec886a3cc182a3f1bfa4986acbb5c8e495745eba6a4fa1d19e46b53182", - "quay.io/armosec/k8s-ca-vuln-scan-ubi:latest" - ], - "sizeBytes": 102332782 - }, - { - "names": [ - "quay.io/armosec/demoservice@sha256:4646027c2d9ad8b5d3f3e72602050e3c565802e5b12ff77bf0dc9514fe81063e", - "quay.io/armosec/demoservice:v4-debian" - ], - "sizeBytes": 92619426 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/emailservice@sha256:ab78ef231ea457860d161f52893c8f464580821f40866af5c0b0040eeb894117", - "gcr.io/google-samples/microservices-demo/emailservice:v0.2.3" - ], - "sizeBytes": 81396192 - }, - { - "names": [ - "gke.gcr.io/gcp-compute-persistent-disk-csi-driver@sha256:e9e3a3af496e330d473b7c5c42958de4ebc1c17fbbb311360b7ecdf7b28e1c93", - "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8" - ], - "sizeBytes": 74280698 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/loadgenerator@sha256:360130ab58500ec7121e75e8003c156bda385e29713869018182857ab128ca7e", - "gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3" - ], - "sizeBytes": 70867506 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/currencyservice@sha256:49d458a3650f7f9d33e2509d152c540afeb1d9f50a66356331d898366ee71d68", - "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3" - ], - "sizeBytes": 53785764 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/paymentservice@sha256:6eb201217a8f3540043d5f64be96b4c3470207b9cc1ea315c1f186595da02db6", - "gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3" - ], - "sizeBytes": 52652022 - }, - { - "names": [ - "gke.gcr.io/k8s-dns-node-cache@sha256:4231096625a3eb88fb630badb69d15fe3ca2403db318e141072e950050307586", - "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1" - ], - "sizeBytes": 46401859 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/cartservice@sha256:566733b4d2d53d9af0cd3db9d267812ff78c8ffd4f49c68e8600eaf02fe285bc", - "gcr.io/google-samples/microservices-demo/cartservice:v0.2.3" - ], - "sizeBytes": 20500350 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/frontend@sha256:ca5c0f0771c89ec9dbfcbb4bfbbd9a048c25f7a625d97781920b35db6cecc19c", - "gcr.io/google-samples/microservices-demo/frontend:v0.2.3" - ], - "sizeBytes": 20370522 - }, - { - "names": [ - "eu.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:3b600d2d5eafa6d5fcedbd783b28694af3f7dd470f3580e83200244fab32b35e", - "asia.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:3b600d2d5eafa6d5fcedbd783b28694af3f7dd470f3580e83200244fab32b35e", - "gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:3b600d2d5eafa6d5fcedbd783b28694af3f7dd470f3580e83200244fab32b35e", - "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "asia.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64:1.8.1-gke.0" - ], - "sizeBytes": 16833220 - }, - { - "names": [ - "asia.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:e3f48b3d1e49cfa3e7f002020769c9cd01cd0e77bbc99dc133c7ab0f8097e989", - "gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:e3f48b3d1e49cfa3e7f002020769c9cd01cd0e77bbc99dc133c7ab0f8097e989", - "eu.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:e3f48b3d1e49cfa3e7f002020769c9cd01cd0e77bbc99dc133c7ab0f8097e989", - "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.7.1-gke.0", - "eu.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64:1.7.1-gke.0" - ], - "sizeBytes": 16572417 - }, - { - "names": [ - "eu.gcr.io/gke-release-staging/cpvpa-amd64@sha256:b802d79f207ea9cbc996cc208781ea34715fe796be68e5250da37b2ae73d42a6", - "gcr.io/gke-release-staging/cpvpa-amd64@sha256:b802d79f207ea9cbc996cc208781ea34715fe796be68e5250da37b2ae73d42a6", - "asia.gcr.io/gke-release-staging/cpvpa-amd64@sha256:b802d79f207ea9cbc996cc208781ea34715fe796be68e5250da37b2ae73d42a6", - "asia.gcr.io/gke-release-staging/cpvpa-amd64:v0.8.3-gke.0", - "gcr.io/gke-release-staging/cpvpa-amd64:v0.8.3-gke.0" - ], - "sizeBytes": 16376177 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/productcatalogservice@sha256:5a4a0e54c6d01285ffc96a12caf0976c2297fc922896c17262828fcc9d0211bf", - "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3" - ], - "sizeBytes": 14630674 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/checkoutservice@sha256:0fad1066de777eb37ebaae88afda058b8b9cb215f977b22a7bab508b5d56dc7d", - "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3" - ], - "sizeBytes": 14575100 - }, - { - "names": [ - "docker.io/library/redis@sha256:fa785f9bd167b94a6b30210ae32422469f4b0f805f4df12733c2f177f500d1ba", - "docker.io/library/redis:alpine" - ], - "sizeBytes": 10906243 - }, - { - "names": [ - "k8s.gcr.io/metrics-server-amd64@sha256:c9c4e95068b51d6b33a9dccc61875df07dc650abbf4ac1a19d58b4628f89288b", - "k8s.gcr.io/metrics-server-amd64:v0.3.6" - ], - "sizeBytes": 10542830 - }, - { - "names": [ - "gke.gcr.io/csi-node-driver-registrar@sha256:877ecfbb4119d63e83a45659044d128326f814ae1091b5630e236930a50b741d", - "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0" - ], - "sizeBytes": 10028812 - }, - { - "names": [ - "asia.gcr.io/gke-release-staging/addon-resizer@sha256:fe1d103a6ccdbee3a8d32fb2b20fe400f16283767040cb295a68d61b1096e91d", - "gcr.io/gke-release-staging/addon-resizer@sha256:fe1d103a6ccdbee3a8d32fb2b20fe400f16283767040cb295a68d61b1096e91d", - "eu.gcr.io/gke-release-staging/addon-resizer@sha256:fe1d103a6ccdbee3a8d32fb2b20fe400f16283767040cb295a68d61b1096e91d", - "gke.gcr.io/addon-resizer:1.8.11-gke.0", - "eu.gcr.io/gke-release-staging/addon-resizer:1.8.11-gke.0" - ], - "sizeBytes": 9653144 - }, - { - "names": [ - "k8s.gcr.io/prometheus-to-sd@sha256:1d49fb3b108e6b42542e4a9b056dee308f06f88824326cde1636eea0472b799d", - "k8s.gcr.io/prometheus-to-sd:v0.7.2" - ], - "sizeBytes": 9588954 - }, - { - "names": [ - "k8s.gcr.io/prometheus-to-sd@sha256:14666989f40bb7c896c3e775a93c6873e2b791d65bc65579f58a078b7f9a764e", - "k8s.gcr.io/prometheus-to-sd:v0.5.0" - ], - "sizeBytes": 9515805 - }, - { - "names": [ - "quay.io/armosec/k8s-ca-init@sha256:099c3693b8fa5f1dc0e349f0340c33cc2d773ef468f9bbfafa4ef268d9deda03", - "quay.io/armosec/k8s-ca-init:b13d41bd70b5a4d6bd4b1a6720b128d0" - ], - "sizeBytes": 9297343 - }, - { - "names": [ - "asia.gcr.io/google-containers/pause-amd64:3.0", - "eu.gcr.io/google-containers/pause-amd64:3.0", - "gcr.io/google-containers/pause-amd64:3.0" - ], - "sizeBytes": 312520 - } - ], - "nodeInfo": { - "architecture": "amd64", - "bootID": "930ef99f-80c0-48cd-91ea-a47d4939fa92", - "containerRuntimeVersion": "containerd://1.4.4", - "kernelVersion": "5.4.120+", - "kubeProxyVersion": "v1.20.9-gke.1001", - "kubeletVersion": "v1.20.9-gke.1001", - "machineID": "98b738e10a646f1b31bdd39f4a70c72d", - "operatingSystem": "linux", - "osImage": "Container-Optimized OS from Google", - "systemUUID": "98b738e1-0a64-6f1b-31bd-d39f4a70c72d" - } - } - }, - { - "apiVersion": "v1", - "kind": "Node", - "metadata": { - "annotations": { - "container.googleapis.com/instance_id": "5761237033488149115", - "csi.volume.kubernetes.io/nodeid": "{\"pd.csi.storage.gke.io\":\"projects/elated-pottery-310110/zones/europe-west1-d/instances/gke-leonid-cluster-default-pool-98608036-enr8\"}", - "node.alpha.kubernetes.io/ttl": "0", - "node.gke.io/last-applied-node-labels": "addon.gke.io/node-local-dns-ds-ready=true,cloud.google.com/gke-boot-disk=pd-standard,cloud.google.com/gke-container-runtime=containerd,cloud.google.com/gke-nodepool=default-pool,cloud.google.com/gke-os-distribution=cos,cloud.google.com/machine-family=e2", - "volumes.kubernetes.io/controller-managed-attach-detach": "true" - }, - "creationTimestamp": "2021-09-25T16:56:29Z", - "labels": { - "addon.gke.io/node-local-dns-ds-ready": "true", - "beta.kubernetes.io/arch": "amd64", - "beta.kubernetes.io/instance-type": "e2-medium", - "beta.kubernetes.io/os": "linux", - "cloud.google.com/gke-boot-disk": "pd-standard", - "cloud.google.com/gke-container-runtime": "containerd", - "cloud.google.com/gke-nodepool": "default-pool", - "cloud.google.com/gke-os-distribution": "cos", - "cloud.google.com/machine-family": "e2", - "failure-domain.beta.kubernetes.io/region": "europe-west1", - "failure-domain.beta.kubernetes.io/zone": "europe-west1-d", - "kubernetes.io/arch": "amd64", - "kubernetes.io/hostname": "gke-leonid-cluster-default-pool-98608036-enr8", - "kubernetes.io/os": "linux", - "node.kubernetes.io/instance-type": "e2-medium", - "topology.gke.io/zone": "europe-west1-d", - "topology.kubernetes.io/region": "europe-west1", - "topology.kubernetes.io/zone": "europe-west1-d" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:node.alpha.kubernetes.io/ttl": {} - } - }, - "f:spec": { - "f:podCIDR": {}, - "f:podCIDRs": { - ".": {}, - "v:\"10.68.7.0/24\"": {} - } - }, - "f:status": { - "f:conditions": { - "k:{\"type\":\"NetworkUnavailable\"}": { - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {} - } - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T16:56:30Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:container.googleapis.com/instance_id": {}, - "f:node.gke.io/last-applied-node-labels": {} - }, - "f:labels": { - "f:addon.gke.io/node-local-dns-ds-ready": {}, - "f:cloud.google.com/gke-boot-disk": {}, - "f:cloud.google.com/gke-container-runtime": {}, - "f:cloud.google.com/gke-nodepool": {}, - "f:cloud.google.com/gke-os-distribution": {}, - "f:cloud.google.com/machine-family": {} - } - } - }, - "manager": "gcp-controller-manager", - "operation": "Update", - "time": "2021-09-25T16:56:31Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:conditions": { - "k:{\"type\":\"CorruptDockerOverlay2\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentContainerdRestart\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentDockerRestart\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentKubeletRestart\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentUnregisterNetDevice\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"KernelDeadlock\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"ReadonlyFilesystem\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - } - } - }, - "manager": "node-problem-detector", - "operation": "Update", - "time": "2021-09-25T16:56:35Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:csi.volume.kubernetes.io/nodeid": {}, - "f:volumes.kubernetes.io/controller-managed-attach-detach": {} - }, - "f:labels": { - ".": {}, - "f:beta.kubernetes.io/arch": {}, - "f:beta.kubernetes.io/instance-type": {}, - "f:beta.kubernetes.io/os": {}, - "f:failure-domain.beta.kubernetes.io/region": {}, - "f:failure-domain.beta.kubernetes.io/zone": {}, - "f:kubernetes.io/arch": {}, - "f:kubernetes.io/hostname": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/instance-type": {}, - "f:topology.gke.io/zone": {}, - "f:topology.kubernetes.io/region": {}, - "f:topology.kubernetes.io/zone": {} - } - }, - "f:spec": { - "f:providerID": {} - }, - "f:status": { - "f:addresses": { - ".": {}, - "k:{\"type\":\"ExternalIP\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - }, - "k:{\"type\":\"Hostname\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - }, - "k:{\"type\":\"InternalDNS\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - }, - "k:{\"type\":\"InternalIP\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - } - }, - "f:allocatable": { - ".": {}, - "f:attachable-volumes-gce-pd": {}, - "f:cpu": {}, - "f:ephemeral-storage": {}, - "f:hugepages-1Gi": {}, - "f:hugepages-2Mi": {}, - "f:memory": {}, - "f:pods": {} - }, - "f:capacity": { - ".": {}, - "f:attachable-volumes-gce-pd": {}, - "f:cpu": {}, - "f:ephemeral-storage": {}, - "f:hugepages-1Gi": {}, - "f:hugepages-2Mi": {}, - "f:memory": {}, - "f:pods": {} - }, - "f:conditions": { - ".": {}, - "k:{\"type\":\"DiskPressure\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"MemoryPressure\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"NetworkUnavailable\"}": { - ".": {}, - "f:type": {} - }, - "k:{\"type\":\"PIDPressure\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:daemonEndpoints": { - "f:kubeletEndpoint": { - "f:Port": {} - } - }, - "f:images": {}, - "f:nodeInfo": { - "f:architecture": {}, - "f:bootID": {}, - "f:containerRuntimeVersion": {}, - "f:kernelVersion": {}, - "f:kubeProxyVersion": {}, - "f:kubeletVersion": {}, - "f:machineID": {}, - "f:operatingSystem": {}, - "f:osImage": {}, - "f:systemUUID": {} - } - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:56:41Z" - } - ], - "name": "gke-leonid-cluster-default-pool-98608036-enr8", - "resourceVersion": "61537479", - "uid": "9aa58d78-0147-4564-9900-0409a6bec341" - }, - "spec": { - "podCIDR": "10.68.7.0/24", - "podCIDRs": [ - "10.68.7.0/24" - ], - "providerID": "gce://elated-pottery-310110/europe-west1-d/gke-leonid-cluster-default-pool-98608036-enr8" - }, - "status": { - "addresses": [ - { - "address": "10.132.0.61", - "type": "InternalIP" - }, - { - "address": "35.195.47.68", - "type": "ExternalIP" - }, - { - "address": "gke-leonid-cluster-default-pool-98608036-enr8.europe-west1-d.c.elated-pottery-310110.internal", - "type": "InternalDNS" - }, - { - "address": "gke-leonid-cluster-default-pool-98608036-enr8.europe-west1-d.c.elated-pottery-310110.internal", - "type": "Hostname" - } - ], - "allocatable": { - "attachable-volumes-gce-pd": "15", - "cpu": "940m", - "ephemeral-storage": "47093746742", - "hugepages-1Gi": "0", - "hugepages-2Mi": "0", - "memory": "2885772Ki", - "pods": "110" - }, - "capacity": { - "attachable-volumes-gce-pd": "15", - "cpu": "2", - "ephemeral-storage": "98868448Ki", - "hugepages-1Gi": "0", - "hugepages-2Mi": "0", - "memory": "4031628Ki", - "pods": "110" - }, - "conditions": [ - { - "lastHeartbeatTime": "2021-10-13T14:25:39Z", - "lastTransitionTime": "2021-09-25T16:56:34Z", - "message": "node is functioning properly", - "reason": "NoFrequentUnregisterNetDevice", - "status": "False", - "type": "FrequentUnregisterNetDevice" - }, - { - "lastHeartbeatTime": "2021-10-13T14:25:39Z", - "lastTransitionTime": "2021-09-25T16:56:34Z", - "message": "kubelet is functioning properly", - "reason": "NoFrequentKubeletRestart", - "status": "False", - "type": "FrequentKubeletRestart" - }, - { - "lastHeartbeatTime": "2021-10-13T14:25:39Z", - "lastTransitionTime": "2021-09-25T16:56:34Z", - "message": "docker is functioning properly", - "reason": "NoFrequentDockerRestart", - "status": "False", - "type": "FrequentDockerRestart" - }, - { - "lastHeartbeatTime": "2021-10-13T14:25:39Z", - "lastTransitionTime": "2021-09-25T16:56:34Z", - "message": "containerd is functioning properly", - "reason": "NoFrequentContainerdRestart", - "status": "False", - "type": "FrequentContainerdRestart" - }, - { - "lastHeartbeatTime": "2021-10-13T14:25:39Z", - "lastTransitionTime": "2021-09-25T16:56:34Z", - "message": "kernel has no deadlock", - "reason": "KernelHasNoDeadlock", - "status": "False", - "type": "KernelDeadlock" - }, - { - "lastHeartbeatTime": "2021-10-13T14:25:39Z", - "lastTransitionTime": "2021-09-25T16:56:34Z", - "message": "Filesystem is not read-only", - "reason": "FilesystemIsNotReadOnly", - "status": "False", - "type": "ReadonlyFilesystem" - }, - { - "lastHeartbeatTime": "2021-10-13T14:25:39Z", - "lastTransitionTime": "2021-09-25T16:56:34Z", - "message": "docker overlay2 is functioning properly", - "reason": "NoCorruptDockerOverlay2", - "status": "False", - "type": "CorruptDockerOverlay2" - }, - { - "lastHeartbeatTime": "2021-09-25T16:56:30Z", - "lastTransitionTime": "2021-09-25T16:56:30Z", - "message": "NodeController create implicit route", - "reason": "RouteCreated", - "status": "False", - "type": "NetworkUnavailable" - }, - { - "lastHeartbeatTime": "2021-10-13T14:27:54Z", - "lastTransitionTime": "2021-09-25T16:56:28Z", - "message": "kubelet has sufficient memory available", - "reason": "KubeletHasSufficientMemory", - "status": "False", - "type": "MemoryPressure" - }, - { - "lastHeartbeatTime": "2021-10-13T14:27:54Z", - "lastTransitionTime": "2021-09-25T16:56:28Z", - "message": "kubelet has no disk pressure", - "reason": "KubeletHasNoDiskPressure", - "status": "False", - "type": "DiskPressure" - }, - { - "lastHeartbeatTime": "2021-10-13T14:27:54Z", - "lastTransitionTime": "2021-09-25T16:56:28Z", - "message": "kubelet has sufficient PID available", - "reason": "KubeletHasSufficientPID", - "status": "False", - "type": "PIDPressure" - }, - { - "lastHeartbeatTime": "2021-10-13T14:27:54Z", - "lastTransitionTime": "2021-09-25T16:56:30Z", - "message": "kubelet is posting ready status. AppArmor enabled", - "reason": "KubeletReady", - "status": "True", - "type": "Ready" - } - ], - "daemonEndpoints": { - "kubeletEndpoint": { - "Port": 10250 - } - }, - "images": [ - { - "names": [ - "gcr.io/google-samples/microservices-demo/adservice@sha256:c79557830d4e3b25ff29946b191d2dee609a2475b6a64a7466ad6374ab7d4ded", - "gcr.io/google-samples/microservices-demo/adservice:v0.2.3" - ], - "sizeBytes": 180082580 - }, - { - "names": [ - "quay.io/armosec/k8s-ca-posture-ubi@sha256:81775d3de0965b034d1293ee53f6fd76cac25130d43ff4b376020fe12961a1f4", - "quay.io/armosec/k8s-ca-posture-ubi:112" - ], - "sizeBytes": 143850331 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/recommendationservice@sha256:5f60c49888595555e7bbb16efa62ef3ec51efe0429c1eb4dd9acaf68f459ad13", - "gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3" - ], - "sizeBytes": 127474515 - }, - { - "names": [ - "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001" - ], - "sizeBytes": 103386207 - }, - { - "names": [ - "quay.io/armosec/demoservice@sha256:4646027c2d9ad8b5d3f3e72602050e3c565802e5b12ff77bf0dc9514fe81063e", - "quay.io/armosec/demoservice:v4-debian" - ], - "sizeBytes": 92619426 - }, - { - "names": [ - "quay.io/armosec/k8s-ca-ocimage@sha256:fe16cb622bf3b4258b6c75d03b8fe783499c5218634aa623c591dbbc244ec936", - "quay.io/armosec/k8s-ca-ocimage:63" - ], - "sizeBytes": 86402738 - }, - { - "names": [ - "quay.io/armosec/k8s-ca-rbac-scanner-ubi@sha256:0674790908c817ad1a302c2afb4d07ececa157a89365ccdb089428c0c1ac8bf2", - "quay.io/armosec/k8s-ca-rbac-scanner-ubi:20" - ], - "sizeBytes": 83276338 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/emailservice@sha256:ab78ef231ea457860d161f52893c8f464580821f40866af5c0b0040eeb894117", - "gcr.io/google-samples/microservices-demo/emailservice:v0.2.3" - ], - "sizeBytes": 81396192 - }, - { - "names": [ - "gke.gcr.io/gcp-compute-persistent-disk-csi-driver@sha256:e9e3a3af496e330d473b7c5c42958de4ebc1c17fbbb311360b7ecdf7b28e1c93", - "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8" - ], - "sizeBytes": 74280698 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/loadgenerator@sha256:360130ab58500ec7121e75e8003c156bda385e29713869018182857ab128ca7e", - "gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3" - ], - "sizeBytes": 70867506 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/currencyservice@sha256:49d458a3650f7f9d33e2509d152c540afeb1d9f50a66356331d898366ee71d68", - "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3" - ], - "sizeBytes": 53785764 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/paymentservice@sha256:6eb201217a8f3540043d5f64be96b4c3470207b9cc1ea315c1f186595da02db6", - "gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3" - ], - "sizeBytes": 52652022 - }, - { - "names": [ - "quay.io/armosec/k8s-ca-dashboard-aggregator-ubi@sha256:5a494a9b4a8f8df959f7cb478d4f92943ca347988d7fa84ae39bfd54bcdb4bc4", - "quay.io/armosec/k8s-ca-dashboard-aggregator-ubi:173" - ], - "sizeBytes": 48721386 - }, - { - "names": [ - "gke.gcr.io/k8s-dns-node-cache@sha256:4231096625a3eb88fb630badb69d15fe3ca2403db318e141072e950050307586", - "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1" - ], - "sizeBytes": 46401859 - }, - { - "names": [ - "gke.gcr.io/k8s-dns-kube-dns@sha256:11648968280d70794bd46e040cfca46d7128e6bbf1cbbf98141ccd3f91a851cf", - "gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1" - ], - "sizeBytes": 41781066 - }, - { - "names": [ - "gke.gcr.io/k8s-dns-sidecar@sha256:a5169fa1b57e0d861500c41eb72c894a1b9c28f488d658ea8de9b58c04a9edc8", - "gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1" - ], - "sizeBytes": 39788931 - }, - { - "names": [ - "gke.gcr.io/k8s-dns-dnsmasq-nanny@sha256:224e84499c0a4be8f8cf5711b45150568028ab142e5e12147145fd8b963a76a2", - "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1" - ], - "sizeBytes": 38838023 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/frontend@sha256:ca5c0f0771c89ec9dbfcbb4bfbbd9a048c25f7a625d97781920b35db6cecc19c", - "gcr.io/google-samples/microservices-demo/frontend:v0.2.3" - ], - "sizeBytes": 20370522 - }, - { - "names": [ - "gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:3b600d2d5eafa6d5fcedbd783b28694af3f7dd470f3580e83200244fab32b35e", - "asia.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:3b600d2d5eafa6d5fcedbd783b28694af3f7dd470f3580e83200244fab32b35e", - "eu.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:3b600d2d5eafa6d5fcedbd783b28694af3f7dd470f3580e83200244fab32b35e", - "eu.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0" - ], - "sizeBytes": 16833220 - }, - { - "names": [ - "gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:e3f48b3d1e49cfa3e7f002020769c9cd01cd0e77bbc99dc133c7ab0f8097e989", - "asia.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:e3f48b3d1e49cfa3e7f002020769c9cd01cd0e77bbc99dc133c7ab0f8097e989", - "eu.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:e3f48b3d1e49cfa3e7f002020769c9cd01cd0e77bbc99dc133c7ab0f8097e989", - "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.7.1-gke.0", - "asia.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64:1.7.1-gke.0" - ], - "sizeBytes": 16572417 - }, - { - "names": [ - "asia.gcr.io/gke-release-staging/cpvpa-amd64@sha256:b802d79f207ea9cbc996cc208781ea34715fe796be68e5250da37b2ae73d42a6", - "gcr.io/gke-release-staging/cpvpa-amd64@sha256:b802d79f207ea9cbc996cc208781ea34715fe796be68e5250da37b2ae73d42a6", - "eu.gcr.io/gke-release-staging/cpvpa-amd64@sha256:b802d79f207ea9cbc996cc208781ea34715fe796be68e5250da37b2ae73d42a6", - "gke.gcr.io/cpvpa-amd64:v0.8.3-gke.0", - "eu.gcr.io/gke-release-staging/cpvpa-amd64:v0.8.3-gke.0" - ], - "sizeBytes": 16376177 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/shippingservice@sha256:0cb1707fc503909e6744ad77fefabeed2e056d17ede3be3ced366800fb88e4da", - "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3" - ], - "sizeBytes": 14599818 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/checkoutservice@sha256:0fad1066de777eb37ebaae88afda058b8b9cb215f977b22a7bab508b5d56dc7d", - "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3" - ], - "sizeBytes": 14575100 - }, - { - "names": [ - "docker.io/library/redis@sha256:58132ff3162cf9ecc8e2042c77b2ec46f6024c35e83bda3cabde76437406f8ac", - "docker.io/library/redis:alpine" - ], - "sizeBytes": 10916691 - }, - { - "names": [ - "k8s.gcr.io/metrics-server-amd64@sha256:c9c4e95068b51d6b33a9dccc61875df07dc650abbf4ac1a19d58b4628f89288b", - "k8s.gcr.io/metrics-server-amd64:v0.3.6" - ], - "sizeBytes": 10542830 - } - ], - "nodeInfo": { - "architecture": "amd64", - "bootID": "c245053b-7844-4280-94dc-ff85f8449343", - "containerRuntimeVersion": "containerd://1.4.4", - "kernelVersion": "5.4.120+", - "kubeProxyVersion": "v1.20.9-gke.1001", - "kubeletVersion": "v1.20.9-gke.1001", - "machineID": "3cd57235f1d2d78180b3e029c7e4d41e", - "operatingSystem": "linux", - "osImage": "Container-Optimized OS from Google", - "systemUUID": "3cd57235-f1d2-d781-80b3-e029c7e4d41e" - } - } - }, - { - "apiVersion": "v1", - "kind": "Node", - "metadata": { - "annotations": { - "container.googleapis.com/instance_id": "6540578417218350008", - "csi.volume.kubernetes.io/nodeid": "{\"pd.csi.storage.gke.io\":\"projects/elated-pottery-310110/zones/europe-west1-d/instances/gke-leonid-cluster-default-pool-98608036-oq2w\"}", - "node.alpha.kubernetes.io/ttl": "0", - "node.gke.io/last-applied-node-labels": "addon.gke.io/node-local-dns-ds-ready=true,cloud.google.com/gke-boot-disk=pd-standard,cloud.google.com/gke-container-runtime=containerd,cloud.google.com/gke-nodepool=default-pool,cloud.google.com/gke-os-distribution=cos,cloud.google.com/machine-family=e2", - "volumes.kubernetes.io/controller-managed-attach-detach": "true" - }, - "creationTimestamp": "2021-09-25T16:59:43Z", - "labels": { - "addon.gke.io/node-local-dns-ds-ready": "true", - "beta.kubernetes.io/arch": "amd64", - "beta.kubernetes.io/instance-type": "e2-medium", - "beta.kubernetes.io/os": "linux", - "cloud.google.com/gke-boot-disk": "pd-standard", - "cloud.google.com/gke-container-runtime": "containerd", - "cloud.google.com/gke-nodepool": "default-pool", - "cloud.google.com/gke-os-distribution": "cos", - "cloud.google.com/machine-family": "e2", - "failure-domain.beta.kubernetes.io/region": "europe-west1", - "failure-domain.beta.kubernetes.io/zone": "europe-west1-d", - "kubernetes.io/arch": "amd64", - "kubernetes.io/hostname": "gke-leonid-cluster-default-pool-98608036-oq2w", - "kubernetes.io/os": "linux", - "node.kubernetes.io/instance-type": "e2-medium", - "topology.gke.io/zone": "europe-west1-d", - "topology.kubernetes.io/region": "europe-west1", - "topology.kubernetes.io/zone": "europe-west1-d" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:container.googleapis.com/instance_id": {}, - "f:node.gke.io/last-applied-node-labels": {} - }, - "f:labels": { - "f:addon.gke.io/node-local-dns-ds-ready": {}, - "f:cloud.google.com/gke-boot-disk": {}, - "f:cloud.google.com/gke-container-runtime": {}, - "f:cloud.google.com/gke-nodepool": {}, - "f:cloud.google.com/gke-os-distribution": {}, - "f:cloud.google.com/machine-family": {} - } - } - }, - "manager": "gcp-controller-manager", - "operation": "Update", - "time": "2021-09-25T16:59:44Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:node.alpha.kubernetes.io/ttl": {} - } - }, - "f:spec": { - "f:podCIDR": {}, - "f:podCIDRs": { - ".": {}, - "v:\"10.68.5.0/24\"": {} - } - }, - "f:status": { - "f:conditions": { - "k:{\"type\":\"NetworkUnavailable\"}": { - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {} - } - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T16:59:44Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:conditions": { - "k:{\"type\":\"CorruptDockerOverlay2\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentContainerdRestart\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentDockerRestart\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentKubeletRestart\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentUnregisterNetDevice\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"KernelDeadlock\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"ReadonlyFilesystem\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - } - } - }, - "manager": "node-problem-detector", - "operation": "Update", - "time": "2021-09-25T16:59:49Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:csi.volume.kubernetes.io/nodeid": {}, - "f:volumes.kubernetes.io/controller-managed-attach-detach": {} - }, - "f:labels": { - ".": {}, - "f:beta.kubernetes.io/arch": {}, - "f:beta.kubernetes.io/instance-type": {}, - "f:beta.kubernetes.io/os": {}, - "f:failure-domain.beta.kubernetes.io/region": {}, - "f:failure-domain.beta.kubernetes.io/zone": {}, - "f:kubernetes.io/arch": {}, - "f:kubernetes.io/hostname": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/instance-type": {}, - "f:topology.gke.io/zone": {}, - "f:topology.kubernetes.io/region": {}, - "f:topology.kubernetes.io/zone": {} - } - }, - "f:spec": { - "f:providerID": {} - }, - "f:status": { - "f:addresses": { - ".": {}, - "k:{\"type\":\"ExternalIP\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - }, - "k:{\"type\":\"Hostname\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - }, - "k:{\"type\":\"InternalDNS\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - }, - "k:{\"type\":\"InternalIP\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - } - }, - "f:allocatable": { - ".": {}, - "f:attachable-volumes-gce-pd": {}, - "f:cpu": {}, - "f:ephemeral-storage": {}, - "f:hugepages-1Gi": {}, - "f:hugepages-2Mi": {}, - "f:memory": {}, - "f:pods": {} - }, - "f:capacity": { - ".": {}, - "f:attachable-volumes-gce-pd": {}, - "f:cpu": {}, - "f:ephemeral-storage": {}, - "f:hugepages-1Gi": {}, - "f:hugepages-2Mi": {}, - "f:memory": {}, - "f:pods": {} - }, - "f:conditions": { - ".": {}, - "k:{\"type\":\"DiskPressure\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"MemoryPressure\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"NetworkUnavailable\"}": { - ".": {}, - "f:type": {} - }, - "k:{\"type\":\"PIDPressure\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:daemonEndpoints": { - "f:kubeletEndpoint": { - "f:Port": {} - } - }, - "f:images": {}, - "f:nodeInfo": { - "f:architecture": {}, - "f:bootID": {}, - "f:containerRuntimeVersion": {}, - "f:kernelVersion": {}, - "f:kubeProxyVersion": {}, - "f:kubeletVersion": {}, - "f:machineID": {}, - "f:operatingSystem": {}, - "f:osImage": {}, - "f:systemUUID": {} - } - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T16:59:54Z" - } - ], - "name": "gke-leonid-cluster-default-pool-98608036-oq2w", - "resourceVersion": "61537699", - "uid": "c1ab3c15-9764-40f5-ba6b-82556dc98ea2" - }, - "spec": { - "podCIDR": "10.68.5.0/24", - "podCIDRs": [ - "10.68.5.0/24" - ], - "providerID": "gce://elated-pottery-310110/europe-west1-d/gke-leonid-cluster-default-pool-98608036-oq2w" - }, - "status": { - "addresses": [ - { - "address": "10.132.0.62", - "type": "InternalIP" - }, - { - "address": "35.233.81.77", - "type": "ExternalIP" - }, - { - "address": "gke-leonid-cluster-default-pool-98608036-oq2w.europe-west1-d.c.elated-pottery-310110.internal", - "type": "InternalDNS" - }, - { - "address": "gke-leonid-cluster-default-pool-98608036-oq2w.europe-west1-d.c.elated-pottery-310110.internal", - "type": "Hostname" - } - ], - "allocatable": { - "attachable-volumes-gce-pd": "15", - "cpu": "940m", - "ephemeral-storage": "47093746742", - "hugepages-1Gi": "0", - "hugepages-2Mi": "0", - "memory": "2885780Ki", - "pods": "110" - }, - "capacity": { - "attachable-volumes-gce-pd": "15", - "cpu": "2", - "ephemeral-storage": "98868448Ki", - "hugepages-1Gi": "0", - "hugepages-2Mi": "0", - "memory": "4031636Ki", - "pods": "110" - }, - "conditions": [ - { - "lastHeartbeatTime": "2021-10-13T14:28:34Z", - "lastTransitionTime": "2021-09-25T16:59:48Z", - "message": "kubelet is functioning properly", - "reason": "NoFrequentKubeletRestart", - "status": "False", - "type": "FrequentKubeletRestart" - }, - { - "lastHeartbeatTime": "2021-10-13T14:28:34Z", - "lastTransitionTime": "2021-09-25T16:59:48Z", - "message": "docker is functioning properly", - "reason": "NoFrequentDockerRestart", - "status": "False", - "type": "FrequentDockerRestart" - }, - { - "lastHeartbeatTime": "2021-10-13T14:28:34Z", - "lastTransitionTime": "2021-09-25T16:59:48Z", - "message": "containerd is functioning properly", - "reason": "NoFrequentContainerdRestart", - "status": "False", - "type": "FrequentContainerdRestart" - }, - { - "lastHeartbeatTime": "2021-10-13T14:28:34Z", - "lastTransitionTime": "2021-09-25T16:59:48Z", - "message": "docker overlay2 is functioning properly", - "reason": "NoCorruptDockerOverlay2", - "status": "False", - "type": "CorruptDockerOverlay2" - }, - { - "lastHeartbeatTime": "2021-10-13T14:28:34Z", - "lastTransitionTime": "2021-09-25T16:59:48Z", - "message": "kernel has no deadlock", - "reason": "KernelHasNoDeadlock", - "status": "False", - "type": "KernelDeadlock" - }, - { - "lastHeartbeatTime": "2021-10-13T14:28:34Z", - "lastTransitionTime": "2021-09-25T16:59:48Z", - "message": "Filesystem is not read-only", - "reason": "FilesystemIsNotReadOnly", - "status": "False", - "type": "ReadonlyFilesystem" - }, - { - "lastHeartbeatTime": "2021-10-13T14:28:34Z", - "lastTransitionTime": "2021-09-25T16:59:48Z", - "message": "node is functioning properly", - "reason": "NoFrequentUnregisterNetDevice", - "status": "False", - "type": "FrequentUnregisterNetDevice" - }, - { - "lastHeartbeatTime": "2021-09-25T16:59:44Z", - "lastTransitionTime": "2021-09-25T16:59:44Z", - "message": "NodeController create implicit route", - "reason": "RouteCreated", - "status": "False", - "type": "NetworkUnavailable" - }, - { - "lastHeartbeatTime": "2021-10-13T14:28:14Z", - "lastTransitionTime": "2021-09-25T16:59:42Z", - "message": "kubelet has sufficient memory available", - "reason": "KubeletHasSufficientMemory", - "status": "False", - "type": "MemoryPressure" - }, - { - "lastHeartbeatTime": "2021-10-13T14:28:14Z", - "lastTransitionTime": "2021-09-25T16:59:42Z", - "message": "kubelet has no disk pressure", - "reason": "KubeletHasNoDiskPressure", - "status": "False", - "type": "DiskPressure" - }, - { - "lastHeartbeatTime": "2021-10-13T14:28:14Z", - "lastTransitionTime": "2021-09-25T16:59:42Z", - "message": "kubelet has sufficient PID available", - "reason": "KubeletHasSufficientPID", - "status": "False", - "type": "PIDPressure" - }, - { - "lastHeartbeatTime": "2021-10-13T14:28:14Z", - "lastTransitionTime": "2021-09-25T16:59:53Z", - "message": "kubelet is posting ready status. AppArmor enabled", - "reason": "KubeletReady", - "status": "True", - "type": "Ready" - } - ], - "daemonEndpoints": { - "kubeletEndpoint": { - "Port": 10250 - } - }, - "images": [ - { - "names": [ - "quay.io/armosec/k8s-ca-webhook-ubi@sha256:03467ff9b70c77f3c714fee7f4e67940d3a9950895e0d7308c6f99f87f31e71b", - "quay.io/armosec/k8s-ca-webhook-ubi:latest" - ], - "sizeBytes": 195758708 - }, - { - "names": [ - "quay.io/armosec/k8s-ca-websocket-ubi@sha256:6343764cc8b801d0621daaabb5160c9f29afe2f05e363bf86e9a40058f11da6c", - "quay.io/armosec/k8s-ca-websocket-ubi:406" - ], - "sizeBytes": 192592518 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/adservice@sha256:c79557830d4e3b25ff29946b191d2dee609a2475b6a64a7466ad6374ab7d4ded", - "gcr.io/google-samples/microservices-demo/adservice:v0.2.3" - ], - "sizeBytes": 180082580 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/recommendationservice@sha256:5f60c49888595555e7bbb16efa62ef3ec51efe0429c1eb4dd9acaf68f459ad13", - "gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3" - ], - "sizeBytes": 127474515 - }, - { - "names": [ - "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001" - ], - "sizeBytes": 103386207 - }, - { - "names": [ - "quay.io/armosec/demoservice@sha256:4646027c2d9ad8b5d3f3e72602050e3c565802e5b12ff77bf0dc9514fe81063e", - "quay.io/armosec/demoservice:v4-debian" - ], - "sizeBytes": 92619426 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/emailservice@sha256:ab78ef231ea457860d161f52893c8f464580821f40866af5c0b0040eeb894117", - "gcr.io/google-samples/microservices-demo/emailservice:v0.2.3" - ], - "sizeBytes": 81396192 - }, - { - "names": [ - "gke.gcr.io/gcp-compute-persistent-disk-csi-driver@sha256:e9e3a3af496e330d473b7c5c42958de4ebc1c17fbbb311360b7ecdf7b28e1c93", - "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8" - ], - "sizeBytes": 74280698 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/loadgenerator@sha256:360130ab58500ec7121e75e8003c156bda385e29713869018182857ab128ca7e", - "gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3" - ], - "sizeBytes": 70867506 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/currencyservice@sha256:49d458a3650f7f9d33e2509d152c540afeb1d9f50a66356331d898366ee71d68", - "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3" - ], - "sizeBytes": 53785764 - }, - { - "names": [ - "gke.gcr.io/k8s-dns-node-cache@sha256:4231096625a3eb88fb630badb69d15fe3ca2403db318e141072e950050307586", - "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1" - ], - "sizeBytes": 46401859 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/cartservice@sha256:566733b4d2d53d9af0cd3db9d267812ff78c8ffd4f49c68e8600eaf02fe285bc", - "gcr.io/google-samples/microservices-demo/cartservice:v0.2.3" - ], - "sizeBytes": 20500350 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/frontend@sha256:ca5c0f0771c89ec9dbfcbb4bfbbd9a048c25f7a625d97781920b35db6cecc19c", - "gcr.io/google-samples/microservices-demo/frontend:v0.2.3" - ], - "sizeBytes": 20370522 - }, - { - "names": [ - "asia.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:3b600d2d5eafa6d5fcedbd783b28694af3f7dd470f3580e83200244fab32b35e", - "gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:3b600d2d5eafa6d5fcedbd783b28694af3f7dd470f3580e83200244fab32b35e", - "eu.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:3b600d2d5eafa6d5fcedbd783b28694af3f7dd470f3580e83200244fab32b35e", - "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "eu.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64:1.8.1-gke.0" - ], - "sizeBytes": 16833220 - }, - { - "names": [ - "gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:e3f48b3d1e49cfa3e7f002020769c9cd01cd0e77bbc99dc133c7ab0f8097e989", - "eu.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:e3f48b3d1e49cfa3e7f002020769c9cd01cd0e77bbc99dc133c7ab0f8097e989", - "asia.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:e3f48b3d1e49cfa3e7f002020769c9cd01cd0e77bbc99dc133c7ab0f8097e989", - "asia.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64:1.7.1-gke.0", - "gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64:1.7.1-gke.0" - ], - "sizeBytes": 16572417 - }, - { - "names": [ - "asia.gcr.io/gke-release-staging/cpvpa-amd64@sha256:b802d79f207ea9cbc996cc208781ea34715fe796be68e5250da37b2ae73d42a6", - "gcr.io/gke-release-staging/cpvpa-amd64@sha256:b802d79f207ea9cbc996cc208781ea34715fe796be68e5250da37b2ae73d42a6", - "eu.gcr.io/gke-release-staging/cpvpa-amd64@sha256:b802d79f207ea9cbc996cc208781ea34715fe796be68e5250da37b2ae73d42a6", - "gke.gcr.io/cpvpa-amd64:v0.8.3-gke.0", - "eu.gcr.io/gke-release-staging/cpvpa-amd64:v0.8.3-gke.0" - ], - "sizeBytes": 16376177 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/productcatalogservice@sha256:5a4a0e54c6d01285ffc96a12caf0976c2297fc922896c17262828fcc9d0211bf", - "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3" - ], - "sizeBytes": 14630674 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/shippingservice@sha256:0cb1707fc503909e6744ad77fefabeed2e056d17ede3be3ced366800fb88e4da", - "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3" - ], - "sizeBytes": 14599818 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/checkoutservice@sha256:0fad1066de777eb37ebaae88afda058b8b9cb215f977b22a7bab508b5d56dc7d", - "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3" - ], - "sizeBytes": 14575100 - }, - { - "names": [ - "docker.io/library/redis@sha256:58132ff3162cf9ecc8e2042c77b2ec46f6024c35e83bda3cabde76437406f8ac", - "docker.io/library/redis:alpine" - ], - "sizeBytes": 10916691 - }, - { - "names": [ - "k8s.gcr.io/metrics-server-amd64@sha256:c9c4e95068b51d6b33a9dccc61875df07dc650abbf4ac1a19d58b4628f89288b", - "k8s.gcr.io/metrics-server-amd64:v0.3.6" - ], - "sizeBytes": 10542830 - }, - { - "names": [ - "gke.gcr.io/csi-node-driver-registrar@sha256:877ecfbb4119d63e83a45659044d128326f814ae1091b5630e236930a50b741d", - "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0" - ], - "sizeBytes": 10028812 - }, - { - "names": [ - "gcr.io/gke-release-staging/addon-resizer@sha256:fe1d103a6ccdbee3a8d32fb2b20fe400f16283767040cb295a68d61b1096e91d", - "asia.gcr.io/gke-release-staging/addon-resizer@sha256:fe1d103a6ccdbee3a8d32fb2b20fe400f16283767040cb295a68d61b1096e91d", - "eu.gcr.io/gke-release-staging/addon-resizer@sha256:fe1d103a6ccdbee3a8d32fb2b20fe400f16283767040cb295a68d61b1096e91d", - "asia.gcr.io/gke-release-staging/addon-resizer:1.8.11-gke.0", - "gke.gcr.io/addon-resizer:1.8.11-gke.0" - ], - "sizeBytes": 9653144 - }, - { - "names": [ - "k8s.gcr.io/prometheus-to-sd@sha256:1d49fb3b108e6b42542e4a9b056dee308f06f88824326cde1636eea0472b799d", - "k8s.gcr.io/prometheus-to-sd:v0.7.2" - ], - "sizeBytes": 9588954 - }, - { - "names": [ - "k8s.gcr.io/prometheus-to-sd@sha256:14666989f40bb7c896c3e775a93c6873e2b791d65bc65579f58a078b7f9a764e", - "k8s.gcr.io/prometheus-to-sd:v0.5.0" - ], - "sizeBytes": 9515805 - } - ], - "nodeInfo": { - "architecture": "amd64", - "bootID": "1265f4ff-912c-44e5-9424-56b443b77df9", - "containerRuntimeVersion": "containerd://1.4.4", - "kernelVersion": "5.4.120+", - "kubeProxyVersion": "v1.20.9-gke.1001", - "kubeletVersion": "v1.20.9-gke.1001", - "machineID": "e6739c4c9bc81fe82ce48c00eac3b9e3", - "operatingSystem": "linux", - "osImage": "Container-Optimized OS from Google", - "systemUUID": "e6739c4c-9bc8-1fe8-2ce4-8c00eac3b9e3" - } - } - }, - { - "apiVersion": "v1", - "kind": "Node", - "metadata": { - "annotations": { - "container.googleapis.com/instance_id": "6079751395842647723", - "csi.volume.kubernetes.io/nodeid": "{\"pd.csi.storage.gke.io\":\"projects/elated-pottery-310110/zones/europe-west1-d/instances/gke-leonid-cluster-default-pool-98608036-rgdp\"}", - "node.alpha.kubernetes.io/ttl": "0", - "node.gke.io/last-applied-node-labels": "addon.gke.io/node-local-dns-ds-ready=true,cloud.google.com/gke-boot-disk=pd-standard,cloud.google.com/gke-container-runtime=containerd,cloud.google.com/gke-nodepool=default-pool,cloud.google.com/gke-os-distribution=cos,cloud.google.com/machine-family=e2", - "volumes.kubernetes.io/controller-managed-attach-detach": "true" - }, - "creationTimestamp": "2021-09-25T17:12:14Z", - "labels": { - "addon.gke.io/node-local-dns-ds-ready": "true", - "beta.kubernetes.io/arch": "amd64", - "beta.kubernetes.io/instance-type": "e2-medium", - "beta.kubernetes.io/os": "linux", - "cloud.google.com/gke-boot-disk": "pd-standard", - "cloud.google.com/gke-container-runtime": "containerd", - "cloud.google.com/gke-nodepool": "default-pool", - "cloud.google.com/gke-os-distribution": "cos", - "cloud.google.com/machine-family": "e2", - "failure-domain.beta.kubernetes.io/region": "europe-west1", - "failure-domain.beta.kubernetes.io/zone": "europe-west1-d", - "kubernetes.io/arch": "amd64", - "kubernetes.io/hostname": "gke-leonid-cluster-default-pool-98608036-rgdp", - "kubernetes.io/os": "linux", - "node.kubernetes.io/instance-type": "e2-medium", - "topology.gke.io/zone": "europe-west1-d", - "topology.kubernetes.io/region": "europe-west1", - "topology.kubernetes.io/zone": "europe-west1-d" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:node.alpha.kubernetes.io/ttl": {} - } - }, - "f:spec": { - "f:podCIDR": {}, - "f:podCIDRs": { - ".": {}, - "v:\"10.68.3.0/24\"": {} - } - }, - "f:status": { - "f:conditions": { - "k:{\"type\":\"NetworkUnavailable\"}": { - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {} - } - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:12:14Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:container.googleapis.com/instance_id": {}, - "f:node.gke.io/last-applied-node-labels": {} - }, - "f:labels": { - "f:addon.gke.io/node-local-dns-ds-ready": {}, - "f:cloud.google.com/gke-boot-disk": {}, - "f:cloud.google.com/gke-container-runtime": {}, - "f:cloud.google.com/gke-nodepool": {}, - "f:cloud.google.com/gke-os-distribution": {}, - "f:cloud.google.com/machine-family": {} - } - } - }, - "manager": "gcp-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:12:15Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:conditions": { - "k:{\"type\":\"CorruptDockerOverlay2\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentContainerdRestart\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentDockerRestart\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentKubeletRestart\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentUnregisterNetDevice\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"KernelDeadlock\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"ReadonlyFilesystem\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - } - } - }, - "manager": "node-problem-detector", - "operation": "Update", - "time": "2021-09-25T17:12:20Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:csi.volume.kubernetes.io/nodeid": {}, - "f:volumes.kubernetes.io/controller-managed-attach-detach": {} - }, - "f:labels": { - ".": {}, - "f:beta.kubernetes.io/arch": {}, - "f:beta.kubernetes.io/instance-type": {}, - "f:beta.kubernetes.io/os": {}, - "f:failure-domain.beta.kubernetes.io/region": {}, - "f:failure-domain.beta.kubernetes.io/zone": {}, - "f:kubernetes.io/arch": {}, - "f:kubernetes.io/hostname": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/instance-type": {}, - "f:topology.gke.io/zone": {}, - "f:topology.kubernetes.io/region": {}, - "f:topology.kubernetes.io/zone": {} - } - }, - "f:spec": { - "f:providerID": {} - }, - "f:status": { - "f:addresses": { - ".": {}, - "k:{\"type\":\"ExternalIP\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - }, - "k:{\"type\":\"Hostname\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - }, - "k:{\"type\":\"InternalDNS\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - }, - "k:{\"type\":\"InternalIP\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - } - }, - "f:allocatable": { - ".": {}, - "f:attachable-volumes-gce-pd": {}, - "f:cpu": {}, - "f:ephemeral-storage": {}, - "f:hugepages-1Gi": {}, - "f:hugepages-2Mi": {}, - "f:memory": {}, - "f:pods": {} - }, - "f:capacity": { - ".": {}, - "f:attachable-volumes-gce-pd": {}, - "f:cpu": {}, - "f:ephemeral-storage": {}, - "f:hugepages-1Gi": {}, - "f:hugepages-2Mi": {}, - "f:memory": {}, - "f:pods": {} - }, - "f:conditions": { - ".": {}, - "k:{\"type\":\"DiskPressure\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"MemoryPressure\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"NetworkUnavailable\"}": { - ".": {}, - "f:type": {} - }, - "k:{\"type\":\"PIDPressure\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:daemonEndpoints": { - "f:kubeletEndpoint": { - "f:Port": {} - } - }, - "f:images": {}, - "f:nodeInfo": { - "f:architecture": {}, - "f:bootID": {}, - "f:containerRuntimeVersion": {}, - "f:kernelVersion": {}, - "f:kubeProxyVersion": {}, - "f:kubeletVersion": {}, - "f:machineID": {}, - "f:operatingSystem": {}, - "f:osImage": {}, - "f:systemUUID": {} - } - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:12:27Z" - } - ], - "name": "gke-leonid-cluster-default-pool-98608036-rgdp", - "resourceVersion": "61537427", - "uid": "7042c0e8-8dc5-4d1d-8b36-92c692c31c76" - }, - "spec": { - "podCIDR": "10.68.3.0/24", - "podCIDRs": [ - "10.68.3.0/24" - ], - "providerID": "gce://elated-pottery-310110/europe-west1-d/gke-leonid-cluster-default-pool-98608036-rgdp" - }, - "status": { - "addresses": [ - { - "address": "10.132.15.194", - "type": "InternalIP" - }, - { - "address": "34.78.82.167", - "type": "ExternalIP" - }, - { - "address": "gke-leonid-cluster-default-pool-98608036-rgdp.europe-west1-d.c.elated-pottery-310110.internal", - "type": "InternalDNS" - }, - { - "address": "gke-leonid-cluster-default-pool-98608036-rgdp.europe-west1-d.c.elated-pottery-310110.internal", - "type": "Hostname" - } - ], - "allocatable": { - "attachable-volumes-gce-pd": "15", - "cpu": "940m", - "ephemeral-storage": "47093746742", - "hugepages-1Gi": "0", - "hugepages-2Mi": "0", - "memory": "2885772Ki", - "pods": "110" - }, - "capacity": { - "attachable-volumes-gce-pd": "15", - "cpu": "2", - "ephemeral-storage": "98868448Ki", - "hugepages-1Gi": "0", - "hugepages-2Mi": "0", - "memory": "4031628Ki", - "pods": "110" - }, - "conditions": [ - { - "lastHeartbeatTime": "2021-10-13T14:26:05Z", - "lastTransitionTime": "2021-09-25T17:12:19Z", - "message": "kubelet is functioning properly", - "reason": "NoFrequentKubeletRestart", - "status": "False", - "type": "FrequentKubeletRestart" - }, - { - "lastHeartbeatTime": "2021-10-13T14:26:05Z", - "lastTransitionTime": "2021-09-25T17:12:19Z", - "message": "docker is functioning properly", - "reason": "NoFrequentDockerRestart", - "status": "False", - "type": "FrequentDockerRestart" - }, - { - "lastHeartbeatTime": "2021-10-13T14:26:05Z", - "lastTransitionTime": "2021-09-25T17:12:19Z", - "message": "containerd is functioning properly", - "reason": "NoFrequentContainerdRestart", - "status": "False", - "type": "FrequentContainerdRestart" - }, - { - "lastHeartbeatTime": "2021-10-13T14:26:05Z", - "lastTransitionTime": "2021-09-25T17:12:19Z", - "message": "kernel has no deadlock", - "reason": "KernelHasNoDeadlock", - "status": "False", - "type": "KernelDeadlock" - }, - { - "lastHeartbeatTime": "2021-10-13T14:26:05Z", - "lastTransitionTime": "2021-09-25T17:12:19Z", - "message": "Filesystem is not read-only", - "reason": "FilesystemIsNotReadOnly", - "status": "False", - "type": "ReadonlyFilesystem" - }, - { - "lastHeartbeatTime": "2021-10-13T14:26:05Z", - "lastTransitionTime": "2021-09-25T17:12:19Z", - "message": "docker overlay2 is functioning properly", - "reason": "NoCorruptDockerOverlay2", - "status": "False", - "type": "CorruptDockerOverlay2" - }, - { - "lastHeartbeatTime": "2021-10-13T14:26:05Z", - "lastTransitionTime": "2021-09-25T17:12:19Z", - "message": "node is functioning properly", - "reason": "NoFrequentUnregisterNetDevice", - "status": "False", - "type": "FrequentUnregisterNetDevice" - }, - { - "lastHeartbeatTime": "2021-09-25T17:12:15Z", - "lastTransitionTime": "2021-09-25T17:12:15Z", - "message": "NodeController create implicit route", - "reason": "RouteCreated", - "status": "False", - "type": "NetworkUnavailable" - }, - { - "lastHeartbeatTime": "2021-10-13T14:27:44Z", - "lastTransitionTime": "2021-09-25T17:12:12Z", - "message": "kubelet has sufficient memory available", - "reason": "KubeletHasSufficientMemory", - "status": "False", - "type": "MemoryPressure" - }, - { - "lastHeartbeatTime": "2021-10-13T14:27:44Z", - "lastTransitionTime": "2021-09-25T17:12:12Z", - "message": "kubelet has no disk pressure", - "reason": "KubeletHasNoDiskPressure", - "status": "False", - "type": "DiskPressure" - }, - { - "lastHeartbeatTime": "2021-10-13T14:27:44Z", - "lastTransitionTime": "2021-09-25T17:12:12Z", - "message": "kubelet has sufficient PID available", - "reason": "KubeletHasSufficientPID", - "status": "False", - "type": "PIDPressure" - }, - { - "lastHeartbeatTime": "2021-10-13T14:27:44Z", - "lastTransitionTime": "2021-09-25T17:12:14Z", - "message": "kubelet is posting ready status. AppArmor enabled", - "reason": "KubeletReady", - "status": "True", - "type": "Ready" - } - ], - "daemonEndpoints": { - "kubeletEndpoint": { - "Port": 10250 - } - }, - "images": [ - { - "names": [ - "quay.io/armosec/k8s-ca-websocket-ubi@sha256:6343764cc8b801d0621daaabb5160c9f29afe2f05e363bf86e9a40058f11da6c", - "quay.io/armosec/k8s-ca-websocket-ubi:latest" - ], - "sizeBytes": 192592518 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/adservice@sha256:c79557830d4e3b25ff29946b191d2dee609a2475b6a64a7466ad6374ab7d4ded", - "gcr.io/google-samples/microservices-demo/adservice:v0.2.3" - ], - "sizeBytes": 180082580 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/recommendationservice@sha256:5f60c49888595555e7bbb16efa62ef3ec51efe0429c1eb4dd9acaf68f459ad13", - "gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3" - ], - "sizeBytes": 127474515 - }, - { - "names": [ - "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001" - ], - "sizeBytes": 103386207 - }, - { - "names": [ - "quay.io/armosec/demoservice@sha256:4646027c2d9ad8b5d3f3e72602050e3c565802e5b12ff77bf0dc9514fe81063e", - "quay.io/armosec/demoservice:v4-debian" - ], - "sizeBytes": 92619426 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/emailservice@sha256:ab78ef231ea457860d161f52893c8f464580821f40866af5c0b0040eeb894117", - "gcr.io/google-samples/microservices-demo/emailservice:v0.2.3" - ], - "sizeBytes": 81396192 - }, - { - "names": [ - "gke.gcr.io/gcp-compute-persistent-disk-csi-driver@sha256:e9e3a3af496e330d473b7c5c42958de4ebc1c17fbbb311360b7ecdf7b28e1c93", - "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8" - ], - "sizeBytes": 74280698 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/loadgenerator@sha256:360130ab58500ec7121e75e8003c156bda385e29713869018182857ab128ca7e", - "gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3" - ], - "sizeBytes": 70867506 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/currencyservice@sha256:49d458a3650f7f9d33e2509d152c540afeb1d9f50a66356331d898366ee71d68", - "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3" - ], - "sizeBytes": 53785764 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/paymentservice@sha256:6eb201217a8f3540043d5f64be96b4c3470207b9cc1ea315c1f186595da02db6", - "gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3" - ], - "sizeBytes": 52652022 - }, - { - "names": [ - "gke.gcr.io/k8s-dns-node-cache@sha256:4231096625a3eb88fb630badb69d15fe3ca2403db318e141072e950050307586", - "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1" - ], - "sizeBytes": 46401859 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/frontend@sha256:ca5c0f0771c89ec9dbfcbb4bfbbd9a048c25f7a625d97781920b35db6cecc19c", - "gcr.io/google-samples/microservices-demo/frontend:v0.2.3" - ], - "sizeBytes": 20370522 - }, - { - "names": [ - "gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:3b600d2d5eafa6d5fcedbd783b28694af3f7dd470f3580e83200244fab32b35e", - "eu.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:3b600d2d5eafa6d5fcedbd783b28694af3f7dd470f3580e83200244fab32b35e", - "asia.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:3b600d2d5eafa6d5fcedbd783b28694af3f7dd470f3580e83200244fab32b35e", - "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "eu.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64:1.8.1-gke.0" - ], - "sizeBytes": 16833220 - }, - { - "names": [ - "asia.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:e3f48b3d1e49cfa3e7f002020769c9cd01cd0e77bbc99dc133c7ab0f8097e989", - "eu.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:e3f48b3d1e49cfa3e7f002020769c9cd01cd0e77bbc99dc133c7ab0f8097e989", - "gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:e3f48b3d1e49cfa3e7f002020769c9cd01cd0e77bbc99dc133c7ab0f8097e989", - "eu.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64:1.7.1-gke.0", - "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.7.1-gke.0" - ], - "sizeBytes": 16572417 - }, - { - "names": [ - "asia.gcr.io/gke-release-staging/cpvpa-amd64@sha256:b802d79f207ea9cbc996cc208781ea34715fe796be68e5250da37b2ae73d42a6", - "gcr.io/gke-release-staging/cpvpa-amd64@sha256:b802d79f207ea9cbc996cc208781ea34715fe796be68e5250da37b2ae73d42a6", - "eu.gcr.io/gke-release-staging/cpvpa-amd64@sha256:b802d79f207ea9cbc996cc208781ea34715fe796be68e5250da37b2ae73d42a6", - "eu.gcr.io/gke-release-staging/cpvpa-amd64:v0.8.3-gke.0", - "gcr.io/gke-release-staging/cpvpa-amd64:v0.8.3-gke.0" - ], - "sizeBytes": 16376177 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/productcatalogservice@sha256:5a4a0e54c6d01285ffc96a12caf0976c2297fc922896c17262828fcc9d0211bf", - "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3" - ], - "sizeBytes": 14630674 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/shippingservice@sha256:0cb1707fc503909e6744ad77fefabeed2e056d17ede3be3ced366800fb88e4da", - "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3" - ], - "sizeBytes": 14599818 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/checkoutservice@sha256:0fad1066de777eb37ebaae88afda058b8b9cb215f977b22a7bab508b5d56dc7d", - "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3" - ], - "sizeBytes": 14575100 - }, - { - "names": [ - "docker.io/library/redis@sha256:58132ff3162cf9ecc8e2042c77b2ec46f6024c35e83bda3cabde76437406f8ac", - "docker.io/library/redis:alpine" - ], - "sizeBytes": 10916691 - }, - { - "names": [ - "k8s.gcr.io/metrics-server-amd64@sha256:c9c4e95068b51d6b33a9dccc61875df07dc650abbf4ac1a19d58b4628f89288b", - "k8s.gcr.io/metrics-server-amd64:v0.3.6" - ], - "sizeBytes": 10542830 - }, - { - "names": [ - "gke.gcr.io/csi-node-driver-registrar@sha256:877ecfbb4119d63e83a45659044d128326f814ae1091b5630e236930a50b741d", - "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0" - ], - "sizeBytes": 10028812 - }, - { - "names": [ - "eu.gcr.io/gke-release-staging/addon-resizer@sha256:fe1d103a6ccdbee3a8d32fb2b20fe400f16283767040cb295a68d61b1096e91d", - "gcr.io/gke-release-staging/addon-resizer@sha256:fe1d103a6ccdbee3a8d32fb2b20fe400f16283767040cb295a68d61b1096e91d", - "asia.gcr.io/gke-release-staging/addon-resizer@sha256:fe1d103a6ccdbee3a8d32fb2b20fe400f16283767040cb295a68d61b1096e91d", - "eu.gcr.io/gke-release-staging/addon-resizer:1.8.11-gke.0", - "asia.gcr.io/gke-release-staging/addon-resizer:1.8.11-gke.0" - ], - "sizeBytes": 9653144 - }, - { - "names": [ - "k8s.gcr.io/prometheus-to-sd@sha256:1d49fb3b108e6b42542e4a9b056dee308f06f88824326cde1636eea0472b799d", - "k8s.gcr.io/prometheus-to-sd:v0.7.2" - ], - "sizeBytes": 9588954 - }, - { - "names": [ - "k8s.gcr.io/prometheus-to-sd@sha256:14666989f40bb7c896c3e775a93c6873e2b791d65bc65579f58a078b7f9a764e", - "k8s.gcr.io/prometheus-to-sd:v0.5.0" - ], - "sizeBytes": 9515805 - }, - { - "names": [ - "quay.io/armosec/k8s-ca-init@sha256:099c3693b8fa5f1dc0e349f0340c33cc2d773ef468f9bbfafa4ef268d9deda03", - "quay.io/armosec/k8s-ca-init:b13d41bd70b5a4d6bd4b1a6720b128d0" - ], - "sizeBytes": 9297343 - } - ], - "nodeInfo": { - "architecture": "amd64", - "bootID": "8787d68d-14b1-4e36-8697-1b7ab7ef5c03", - "containerRuntimeVersion": "containerd://1.4.4", - "kernelVersion": "5.4.120+", - "kubeProxyVersion": "v1.20.9-gke.1001", - "kubeletVersion": "v1.20.9-gke.1001", - "machineID": "a34b517a842f55b4c65cc3f6db2b20e8", - "operatingSystem": "linux", - "osImage": "Container-Optimized OS from Google", - "systemUUID": "a34b517a-842f-55b4-c65c-c3f6db2b20e8" - } - } - }, - { - "apiVersion": "v1", - "kind": "Node", - "metadata": { - "annotations": { - "container.googleapis.com/instance_id": "8858124065557375023", - "csi.volume.kubernetes.io/nodeid": "{\"pd.csi.storage.gke.io\":\"projects/elated-pottery-310110/zones/europe-west1-d/instances/gke-leonid-cluster-default-pool-98608036-x940\"}", - "node.alpha.kubernetes.io/ttl": "0", - "node.gke.io/last-applied-node-labels": "addon.gke.io/node-local-dns-ds-ready=true,cloud.google.com/gke-boot-disk=pd-standard,cloud.google.com/gke-container-runtime=containerd,cloud.google.com/gke-nodepool=default-pool,cloud.google.com/gke-os-distribution=cos,cloud.google.com/machine-family=e2", - "volumes.kubernetes.io/controller-managed-attach-detach": "true" - }, - "creationTimestamp": "2021-09-25T17:05:47Z", - "labels": { - "addon.gke.io/node-local-dns-ds-ready": "true", - "beta.kubernetes.io/arch": "amd64", - "beta.kubernetes.io/instance-type": "e2-medium", - "beta.kubernetes.io/os": "linux", - "cloud.google.com/gke-boot-disk": "pd-standard", - "cloud.google.com/gke-container-runtime": "containerd", - "cloud.google.com/gke-nodepool": "default-pool", - "cloud.google.com/gke-os-distribution": "cos", - "cloud.google.com/machine-family": "e2", - "failure-domain.beta.kubernetes.io/region": "europe-west1", - "failure-domain.beta.kubernetes.io/zone": "europe-west1-d", - "kubernetes.io/arch": "amd64", - "kubernetes.io/hostname": "gke-leonid-cluster-default-pool-98608036-x940", - "kubernetes.io/os": "linux", - "node.kubernetes.io/instance-type": "e2-medium", - "topology.gke.io/zone": "europe-west1-d", - "topology.kubernetes.io/region": "europe-west1", - "topology.kubernetes.io/zone": "europe-west1-d" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:container.googleapis.com/instance_id": {}, - "f:node.gke.io/last-applied-node-labels": {} - }, - "f:labels": { - "f:addon.gke.io/node-local-dns-ds-ready": {}, - "f:cloud.google.com/gke-boot-disk": {}, - "f:cloud.google.com/gke-container-runtime": {}, - "f:cloud.google.com/gke-nodepool": {}, - "f:cloud.google.com/gke-os-distribution": {}, - "f:cloud.google.com/machine-family": {} - } - } - }, - "manager": "gcp-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:05:48Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:node.alpha.kubernetes.io/ttl": {} - } - }, - "f:spec": { - "f:podCIDR": {}, - "f:podCIDRs": { - ".": {}, - "v:\"10.68.4.0/24\"": {} - } - }, - "f:status": { - "f:conditions": { - "k:{\"type\":\"NetworkUnavailable\"}": { - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {} - } - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:05:48Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:conditions": { - "k:{\"type\":\"CorruptDockerOverlay2\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentContainerdRestart\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentDockerRestart\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentKubeletRestart\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentUnregisterNetDevice\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"KernelDeadlock\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"ReadonlyFilesystem\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - } - } - }, - "manager": "node-problem-detector", - "operation": "Update", - "time": "2021-09-25T17:05:53Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:csi.volume.kubernetes.io/nodeid": {}, - "f:volumes.kubernetes.io/controller-managed-attach-detach": {} - }, - "f:labels": { - ".": {}, - "f:beta.kubernetes.io/arch": {}, - "f:beta.kubernetes.io/instance-type": {}, - "f:beta.kubernetes.io/os": {}, - "f:failure-domain.beta.kubernetes.io/region": {}, - "f:failure-domain.beta.kubernetes.io/zone": {}, - "f:kubernetes.io/arch": {}, - "f:kubernetes.io/hostname": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/instance-type": {}, - "f:topology.gke.io/zone": {}, - "f:topology.kubernetes.io/region": {}, - "f:topology.kubernetes.io/zone": {} - } - }, - "f:spec": { - "f:providerID": {} - }, - "f:status": { - "f:addresses": { - ".": {}, - "k:{\"type\":\"ExternalIP\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - }, - "k:{\"type\":\"Hostname\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - }, - "k:{\"type\":\"InternalDNS\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - }, - "k:{\"type\":\"InternalIP\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - } - }, - "f:allocatable": { - ".": {}, - "f:attachable-volumes-gce-pd": {}, - "f:cpu": {}, - "f:ephemeral-storage": {}, - "f:hugepages-1Gi": {}, - "f:hugepages-2Mi": {}, - "f:memory": {}, - "f:pods": {} - }, - "f:capacity": { - ".": {}, - "f:attachable-volumes-gce-pd": {}, - "f:cpu": {}, - "f:ephemeral-storage": {}, - "f:hugepages-1Gi": {}, - "f:hugepages-2Mi": {}, - "f:memory": {}, - "f:pods": {} - }, - "f:conditions": { - ".": {}, - "k:{\"type\":\"DiskPressure\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"MemoryPressure\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"NetworkUnavailable\"}": { - ".": {}, - "f:type": {} - }, - "k:{\"type\":\"PIDPressure\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:daemonEndpoints": { - "f:kubeletEndpoint": { - "f:Port": {} - } - }, - "f:images": {}, - "f:nodeInfo": { - "f:architecture": {}, - "f:bootID": {}, - "f:containerRuntimeVersion": {}, - "f:kernelVersion": {}, - "f:kubeProxyVersion": {}, - "f:kubeletVersion": {}, - "f:machineID": {}, - "f:operatingSystem": {}, - "f:osImage": {}, - "f:systemUUID": {} - } - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:05:59Z" - } - ], - "name": "gke-leonid-cluster-default-pool-98608036-x940", - "resourceVersion": "61538356", - "uid": "a58f61e7-9d9e-4266-90d4-16b9969cb373" - }, - "spec": { - "podCIDR": "10.68.4.0/24", - "podCIDRs": [ - "10.68.4.0/24" - ], - "providerID": "gce://elated-pottery-310110/europe-west1-d/gke-leonid-cluster-default-pool-98608036-x940" - }, - "status": { - "addresses": [ - { - "address": "10.132.15.192", - "type": "InternalIP" - }, - { - "address": "34.79.208.123", - "type": "ExternalIP" - }, - { - "address": "gke-leonid-cluster-default-pool-98608036-x940.europe-west1-d.c.elated-pottery-310110.internal", - "type": "InternalDNS" - }, - { - "address": "gke-leonid-cluster-default-pool-98608036-x940.europe-west1-d.c.elated-pottery-310110.internal", - "type": "Hostname" - } - ], - "allocatable": { - "attachable-volumes-gce-pd": "15", - "cpu": "940m", - "ephemeral-storage": "47093746742", - "hugepages-1Gi": "0", - "hugepages-2Mi": "0", - "memory": "2885772Ki", - "pods": "110" - }, - "capacity": { - "attachable-volumes-gce-pd": "15", - "cpu": "2", - "ephemeral-storage": "98868448Ki", - "hugepages-1Gi": "0", - "hugepages-2Mi": "0", - "memory": "4031628Ki", - "pods": "110" - }, - "conditions": [ - { - "lastHeartbeatTime": "2021-10-13T14:30:38Z", - "lastTransitionTime": "2021-09-25T17:05:52Z", - "message": "docker overlay2 is functioning properly", - "reason": "NoCorruptDockerOverlay2", - "status": "False", - "type": "CorruptDockerOverlay2" - }, - { - "lastHeartbeatTime": "2021-10-13T14:30:38Z", - "lastTransitionTime": "2021-09-25T17:05:52Z", - "message": "node is functioning properly", - "reason": "NoFrequentUnregisterNetDevice", - "status": "False", - "type": "FrequentUnregisterNetDevice" - }, - { - "lastHeartbeatTime": "2021-10-13T14:30:38Z", - "lastTransitionTime": "2021-09-25T17:05:52Z", - "message": "kubelet is functioning properly", - "reason": "NoFrequentKubeletRestart", - "status": "False", - "type": "FrequentKubeletRestart" - }, - { - "lastHeartbeatTime": "2021-10-13T14:30:38Z", - "lastTransitionTime": "2021-09-25T17:05:52Z", - "message": "docker is functioning properly", - "reason": "NoFrequentDockerRestart", - "status": "False", - "type": "FrequentDockerRestart" - }, - { - "lastHeartbeatTime": "2021-10-13T14:30:38Z", - "lastTransitionTime": "2021-09-25T17:05:52Z", - "message": "containerd is functioning properly", - "reason": "NoFrequentContainerdRestart", - "status": "False", - "type": "FrequentContainerdRestart" - }, - { - "lastHeartbeatTime": "2021-10-13T14:30:38Z", - "lastTransitionTime": "2021-09-25T17:05:52Z", - "message": "kernel has no deadlock", - "reason": "KernelHasNoDeadlock", - "status": "False", - "type": "KernelDeadlock" - }, - { - "lastHeartbeatTime": "2021-10-13T14:30:38Z", - "lastTransitionTime": "2021-09-25T17:05:52Z", - "message": "Filesystem is not read-only", - "reason": "FilesystemIsNotReadOnly", - "status": "False", - "type": "ReadonlyFilesystem" - }, - { - "lastHeartbeatTime": "2021-09-25T17:05:48Z", - "lastTransitionTime": "2021-09-25T17:05:48Z", - "message": "NodeController create implicit route", - "reason": "RouteCreated", - "status": "False", - "type": "NetworkUnavailable" - }, - { - "lastHeartbeatTime": "2021-10-13T14:26:03Z", - "lastTransitionTime": "2021-09-25T17:05:46Z", - "message": "kubelet has sufficient memory available", - "reason": "KubeletHasSufficientMemory", - "status": "False", - "type": "MemoryPressure" - }, - { - "lastHeartbeatTime": "2021-10-13T14:26:03Z", - "lastTransitionTime": "2021-09-25T17:05:46Z", - "message": "kubelet has no disk pressure", - "reason": "KubeletHasNoDiskPressure", - "status": "False", - "type": "DiskPressure" - }, - { - "lastHeartbeatTime": "2021-10-13T14:26:03Z", - "lastTransitionTime": "2021-09-25T17:05:46Z", - "message": "kubelet has sufficient PID available", - "reason": "KubeletHasSufficientPID", - "status": "False", - "type": "PIDPressure" - }, - { - "lastHeartbeatTime": "2021-10-13T14:26:03Z", - "lastTransitionTime": "2021-09-25T17:05:48Z", - "message": "kubelet is posting ready status. AppArmor enabled", - "reason": "KubeletReady", - "status": "True", - "type": "Ready" - } - ], - "daemonEndpoints": { - "kubeletEndpoint": { - "Port": 10250 - } - }, - "images": [ - { - "names": [ - "quay.io/armosec/k8s-ca-webhook-ubi@sha256:03467ff9b70c77f3c714fee7f4e67940d3a9950895e0d7308c6f99f87f31e71b", - "quay.io/armosec/k8s-ca-webhook-ubi:latest" - ], - "sizeBytes": 195758708 - }, - { - "names": [ - "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001" - ], - "sizeBytes": 103386207 - }, - { - "names": [ - "quay.io/armosec/k8s-ca-vuln-scan-ubi@sha256:1f7559ec886a3cc182a3f1bfa4986acbb5c8e495745eba6a4fa1d19e46b53182", - "quay.io/armosec/k8s-ca-vuln-scan-ubi:84" - ], - "sizeBytes": 102332782 - }, - { - "names": [ - "gke.gcr.io/gcp-compute-persistent-disk-csi-driver@sha256:e9e3a3af496e330d473b7c5c42958de4ebc1c17fbbb311360b7ecdf7b28e1c93", - "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8" - ], - "sizeBytes": 74280698 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/currencyservice@sha256:49d458a3650f7f9d33e2509d152c540afeb1d9f50a66356331d898366ee71d68", - "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3" - ], - "sizeBytes": 53785764 - }, - { - "names": [ - "gke.gcr.io/k8s-dns-node-cache@sha256:4231096625a3eb88fb630badb69d15fe3ca2403db318e141072e950050307586", - "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1" - ], - "sizeBytes": 46401859 - }, - { - "names": [ - "gke.gcr.io/k8s-dns-kube-dns@sha256:11648968280d70794bd46e040cfca46d7128e6bbf1cbbf98141ccd3f91a851cf", - "gke.gcr.io/k8s-dns-kube-dns:1.19.1-gke.1" - ], - "sizeBytes": 41781066 - }, - { - "names": [ - "gke.gcr.io/k8s-dns-sidecar@sha256:a5169fa1b57e0d861500c41eb72c894a1b9c28f488d658ea8de9b58c04a9edc8", - "gke.gcr.io/k8s-dns-sidecar:1.19.1-gke.1" - ], - "sizeBytes": 39788931 - }, - { - "names": [ - "gke.gcr.io/k8s-dns-dnsmasq-nanny@sha256:224e84499c0a4be8f8cf5711b45150568028ab142e5e12147145fd8b963a76a2", - "gke.gcr.io/k8s-dns-dnsmasq-nanny:1.19.1-gke.1" - ], - "sizeBytes": 38838023 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/cartservice@sha256:566733b4d2d53d9af0cd3db9d267812ff78c8ffd4f49c68e8600eaf02fe285bc", - "gcr.io/google-samples/microservices-demo/cartservice:v0.2.3" - ], - "sizeBytes": 20500350 - }, - { - "names": [ - "gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:3b600d2d5eafa6d5fcedbd783b28694af3f7dd470f3580e83200244fab32b35e", - "asia.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:3b600d2d5eafa6d5fcedbd783b28694af3f7dd470f3580e83200244fab32b35e", - "eu.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:3b600d2d5eafa6d5fcedbd783b28694af3f7dd470f3580e83200244fab32b35e", - "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "eu.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64:1.8.1-gke.0" - ], - "sizeBytes": 16833220 - }, - { - "names": [ - "gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:e3f48b3d1e49cfa3e7f002020769c9cd01cd0e77bbc99dc133c7ab0f8097e989", - "asia.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:e3f48b3d1e49cfa3e7f002020769c9cd01cd0e77bbc99dc133c7ab0f8097e989", - "eu.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:e3f48b3d1e49cfa3e7f002020769c9cd01cd0e77bbc99dc133c7ab0f8097e989", - "gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64:1.7.1-gke.0", - "asia.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64:1.7.1-gke.0" - ], - "sizeBytes": 16572417 - }, - { - "names": [ - "asia.gcr.io/gke-release-staging/cpvpa-amd64@sha256:b802d79f207ea9cbc996cc208781ea34715fe796be68e5250da37b2ae73d42a6", - "eu.gcr.io/gke-release-staging/cpvpa-amd64@sha256:b802d79f207ea9cbc996cc208781ea34715fe796be68e5250da37b2ae73d42a6", - "gcr.io/gke-release-staging/cpvpa-amd64@sha256:b802d79f207ea9cbc996cc208781ea34715fe796be68e5250da37b2ae73d42a6", - "eu.gcr.io/gke-release-staging/cpvpa-amd64:v0.8.3-gke.0", - "gke.gcr.io/cpvpa-amd64:v0.8.3-gke.0" - ], - "sizeBytes": 16376177 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/productcatalogservice@sha256:5a4a0e54c6d01285ffc96a12caf0976c2297fc922896c17262828fcc9d0211bf", - "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3" - ], - "sizeBytes": 14630674 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/shippingservice@sha256:0cb1707fc503909e6744ad77fefabeed2e056d17ede3be3ced366800fb88e4da", - "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3" - ], - "sizeBytes": 14599818 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/checkoutservice@sha256:0fad1066de777eb37ebaae88afda058b8b9cb215f977b22a7bab508b5d56dc7d", - "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3" - ], - "sizeBytes": 14575100 - }, - { - "names": [ - "docker.io/library/redis@sha256:fa785f9bd167b94a6b30210ae32422469f4b0f805f4df12733c2f177f500d1ba", - "docker.io/library/redis:alpine" - ], - "sizeBytes": 10906243 - }, - { - "names": [ - "k8s.gcr.io/metrics-server-amd64@sha256:c9c4e95068b51d6b33a9dccc61875df07dc650abbf4ac1a19d58b4628f89288b", - "k8s.gcr.io/metrics-server-amd64:v0.3.6" - ], - "sizeBytes": 10542830 - }, - { - "names": [ - "gke.gcr.io/csi-node-driver-registrar@sha256:877ecfbb4119d63e83a45659044d128326f814ae1091b5630e236930a50b741d", - "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0" - ], - "sizeBytes": 10028812 - }, - { - "names": [ - "asia.gcr.io/gke-release-staging/addon-resizer@sha256:fe1d103a6ccdbee3a8d32fb2b20fe400f16283767040cb295a68d61b1096e91d", - "gcr.io/gke-release-staging/addon-resizer@sha256:fe1d103a6ccdbee3a8d32fb2b20fe400f16283767040cb295a68d61b1096e91d", - "eu.gcr.io/gke-release-staging/addon-resizer@sha256:fe1d103a6ccdbee3a8d32fb2b20fe400f16283767040cb295a68d61b1096e91d", - "asia.gcr.io/gke-release-staging/addon-resizer:1.8.11-gke.0", - "eu.gcr.io/gke-release-staging/addon-resizer:1.8.11-gke.0" - ], - "sizeBytes": 9653144 - }, - { - "names": [ - "k8s.gcr.io/prometheus-to-sd@sha256:1d49fb3b108e6b42542e4a9b056dee308f06f88824326cde1636eea0472b799d", - "k8s.gcr.io/prometheus-to-sd:v0.7.2" - ], - "sizeBytes": 9588954 - }, - { - "names": [ - "k8s.gcr.io/prometheus-to-sd@sha256:14666989f40bb7c896c3e775a93c6873e2b791d65bc65579f58a078b7f9a764e", - "k8s.gcr.io/prometheus-to-sd:v0.5.0" - ], - "sizeBytes": 9515805 - }, - { - "names": [ - "quay.io/armosec/k8s-ca-init@sha256:099c3693b8fa5f1dc0e349f0340c33cc2d773ef468f9bbfafa4ef268d9deda03", - "quay.io/armosec/k8s-ca-init:b13d41bd70b5a4d6bd4b1a6720b128d0" - ], - "sizeBytes": 9297343 - }, - { - "names": [ - "asia.gcr.io/google-containers/pause-amd64:3.0", - "gcr.io/google-containers/pause-amd64:3.0", - "eu.gcr.io/google-containers/pause-amd64:3.0" - ], - "sizeBytes": 312520 - }, - { - "names": [ - "k8s.gcr.io/pause@sha256:927d98197ec1141a368550822d18fa1c60bdae27b78b0c004f705f548c07814f", - "k8s.gcr.io/pause:3.2" - ], - "sizeBytes": 299513 - } - ], - "nodeInfo": { - "architecture": "amd64", - "bootID": "e02521b5-3827-4f2f-8ea3-f22e9d283a7c", - "containerRuntimeVersion": "containerd://1.4.4", - "kernelVersion": "5.4.120+", - "kubeProxyVersion": "v1.20.9-gke.1001", - "kubeletVersion": "v1.20.9-gke.1001", - "machineID": "e60848d615dd46f6e22206420e0116cd", - "operatingSystem": "linux", - "osImage": "Container-Optimized OS from Google", - "systemUUID": "e60848d6-15dd-46f6-e222-06420e0116cd" - } - } - }, - { - "apiVersion": "v1", - "kind": "Node", - "metadata": { - "annotations": { - "container.googleapis.com/instance_id": "4887016566604097055", - "csi.volume.kubernetes.io/nodeid": "{\"pd.csi.storage.gke.io\":\"projects/elated-pottery-310110/zones/europe-west1-d/instances/gke-leonid-cluster-default-pool-98608036-zzyg\"}", - "node.alpha.kubernetes.io/ttl": "0", - "node.gke.io/last-applied-node-labels": "addon.gke.io/node-local-dns-ds-ready=true,cloud.google.com/gke-boot-disk=pd-standard,cloud.google.com/gke-container-runtime=containerd,cloud.google.com/gke-nodepool=default-pool,cloud.google.com/gke-os-distribution=cos,cloud.google.com/machine-family=e2", - "volumes.kubernetes.io/controller-managed-attach-detach": "true" - }, - "creationTimestamp": "2021-09-25T17:15:08Z", - "labels": { - "addon.gke.io/node-local-dns-ds-ready": "true", - "beta.kubernetes.io/arch": "amd64", - "beta.kubernetes.io/instance-type": "e2-medium", - "beta.kubernetes.io/os": "linux", - "cloud.google.com/gke-boot-disk": "pd-standard", - "cloud.google.com/gke-container-runtime": "containerd", - "cloud.google.com/gke-nodepool": "default-pool", - "cloud.google.com/gke-os-distribution": "cos", - "cloud.google.com/machine-family": "e2", - "failure-domain.beta.kubernetes.io/region": "europe-west1", - "failure-domain.beta.kubernetes.io/zone": "europe-west1-d", - "kubernetes.io/arch": "amd64", - "kubernetes.io/hostname": "gke-leonid-cluster-default-pool-98608036-zzyg", - "kubernetes.io/os": "linux", - "node.kubernetes.io/instance-type": "e2-medium", - "topology.gke.io/zone": "europe-west1-d", - "topology.kubernetes.io/region": "europe-west1", - "topology.kubernetes.io/zone": "europe-west1-d" - }, - "managedFields": [ - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:node.alpha.kubernetes.io/ttl": {} - } - }, - "f:spec": { - "f:podCIDR": {}, - "f:podCIDRs": { - ".": {}, - "v:\"10.68.6.0/24\"": {} - } - }, - "f:status": { - "f:conditions": { - "k:{\"type\":\"NetworkUnavailable\"}": { - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {} - } - } - } - }, - "manager": "kube-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:15:08Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - "f:container.googleapis.com/instance_id": {}, - "f:node.gke.io/last-applied-node-labels": {} - }, - "f:labels": { - "f:addon.gke.io/node-local-dns-ds-ready": {}, - "f:cloud.google.com/gke-boot-disk": {}, - "f:cloud.google.com/gke-container-runtime": {}, - "f:cloud.google.com/gke-nodepool": {}, - "f:cloud.google.com/gke-os-distribution": {}, - "f:cloud.google.com/machine-family": {} - } - } - }, - "manager": "gcp-controller-manager", - "operation": "Update", - "time": "2021-09-25T17:15:09Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:status": { - "f:conditions": { - "k:{\"type\":\"CorruptDockerOverlay2\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentContainerdRestart\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentDockerRestart\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentKubeletRestart\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"FrequentUnregisterNetDevice\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"KernelDeadlock\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"ReadonlyFilesystem\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - } - } - }, - "manager": "node-problem-detector", - "operation": "Update", - "time": "2021-09-25T17:15:14Z" - }, - { - "apiVersion": "v1", - "fieldsType": "FieldsV1", - "fieldsV1": { - "f:metadata": { - "f:annotations": { - ".": {}, - "f:csi.volume.kubernetes.io/nodeid": {}, - "f:volumes.kubernetes.io/controller-managed-attach-detach": {} - }, - "f:labels": { - ".": {}, - "f:beta.kubernetes.io/arch": {}, - "f:beta.kubernetes.io/instance-type": {}, - "f:beta.kubernetes.io/os": {}, - "f:failure-domain.beta.kubernetes.io/region": {}, - "f:failure-domain.beta.kubernetes.io/zone": {}, - "f:kubernetes.io/arch": {}, - "f:kubernetes.io/hostname": {}, - "f:kubernetes.io/os": {}, - "f:node.kubernetes.io/instance-type": {}, - "f:topology.gke.io/zone": {}, - "f:topology.kubernetes.io/region": {}, - "f:topology.kubernetes.io/zone": {} - } - }, - "f:spec": { - "f:providerID": {} - }, - "f:status": { - "f:addresses": { - ".": {}, - "k:{\"type\":\"ExternalIP\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - }, - "k:{\"type\":\"Hostname\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - }, - "k:{\"type\":\"InternalDNS\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - }, - "k:{\"type\":\"InternalIP\"}": { - ".": {}, - "f:address": {}, - "f:type": {} - } - }, - "f:allocatable": { - ".": {}, - "f:attachable-volumes-gce-pd": {}, - "f:cpu": {}, - "f:ephemeral-storage": {}, - "f:hugepages-1Gi": {}, - "f:hugepages-2Mi": {}, - "f:memory": {}, - "f:pods": {} - }, - "f:capacity": { - ".": {}, - "f:attachable-volumes-gce-pd": {}, - "f:cpu": {}, - "f:ephemeral-storage": {}, - "f:hugepages-1Gi": {}, - "f:hugepages-2Mi": {}, - "f:memory": {}, - "f:pods": {} - }, - "f:conditions": { - ".": {}, - "k:{\"type\":\"DiskPressure\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"MemoryPressure\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"NetworkUnavailable\"}": { - ".": {}, - "f:type": {} - }, - "k:{\"type\":\"PIDPressure\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - }, - "k:{\"type\":\"Ready\"}": { - ".": {}, - "f:lastHeartbeatTime": {}, - "f:lastTransitionTime": {}, - "f:message": {}, - "f:reason": {}, - "f:status": {}, - "f:type": {} - } - }, - "f:daemonEndpoints": { - "f:kubeletEndpoint": { - "f:Port": {} - } - }, - "f:images": {}, - "f:nodeInfo": { - "f:architecture": {}, - "f:bootID": {}, - "f:containerRuntimeVersion": {}, - "f:kernelVersion": {}, - "f:kubeProxyVersion": {}, - "f:kubeletVersion": {}, - "f:machineID": {}, - "f:operatingSystem": {}, - "f:osImage": {}, - "f:systemUUID": {} - } - } - }, - "manager": "kubelet", - "operation": "Update", - "time": "2021-09-25T17:15:23Z" - } - ], - "name": "gke-leonid-cluster-default-pool-98608036-zzyg", - "resourceVersion": "61538176", - "uid": "65f37105-dd71-428b-bf8b-0e82b88027f1" - }, - "spec": { - "podCIDR": "10.68.6.0/24", - "podCIDRs": [ - "10.68.6.0/24" - ], - "providerID": "gce://elated-pottery-310110/europe-west1-d/gke-leonid-cluster-default-pool-98608036-zzyg" - }, - "status": { - "addresses": [ - { - "address": "10.132.15.195", - "type": "InternalIP" - }, - { - "address": "35.195.103.31", - "type": "ExternalIP" - }, - { - "address": "gke-leonid-cluster-default-pool-98608036-zzyg.europe-west1-d.c.elated-pottery-310110.internal", - "type": "InternalDNS" - }, - { - "address": "gke-leonid-cluster-default-pool-98608036-zzyg.europe-west1-d.c.elated-pottery-310110.internal", - "type": "Hostname" - } - ], - "allocatable": { - "attachable-volumes-gce-pd": "15", - "cpu": "940m", - "ephemeral-storage": "47093746742", - "hugepages-1Gi": "0", - "hugepages-2Mi": "0", - "memory": "2885780Ki", - "pods": "110" - }, - "capacity": { - "attachable-volumes-gce-pd": "15", - "cpu": "2", - "ephemeral-storage": "98868448Ki", - "hugepages-1Gi": "0", - "hugepages-2Mi": "0", - "memory": "4031636Ki", - "pods": "110" - }, - "conditions": [ - { - "lastHeartbeatTime": "2021-10-13T14:28:52Z", - "lastTransitionTime": "2021-09-25T17:15:13Z", - "message": "node is functioning properly", - "reason": "NoFrequentUnregisterNetDevice", - "status": "False", - "type": "FrequentUnregisterNetDevice" - }, - { - "lastHeartbeatTime": "2021-10-13T14:28:52Z", - "lastTransitionTime": "2021-09-25T17:15:13Z", - "message": "kubelet is functioning properly", - "reason": "NoFrequentKubeletRestart", - "status": "False", - "type": "FrequentKubeletRestart" - }, - { - "lastHeartbeatTime": "2021-10-13T14:28:52Z", - "lastTransitionTime": "2021-09-25T17:15:13Z", - "message": "docker is functioning properly", - "reason": "NoFrequentDockerRestart", - "status": "False", - "type": "FrequentDockerRestart" - }, - { - "lastHeartbeatTime": "2021-10-13T14:28:52Z", - "lastTransitionTime": "2021-09-25T17:15:13Z", - "message": "containerd is functioning properly", - "reason": "NoFrequentContainerdRestart", - "status": "False", - "type": "FrequentContainerdRestart" - }, - { - "lastHeartbeatTime": "2021-10-13T14:28:52Z", - "lastTransitionTime": "2021-09-25T17:15:13Z", - "message": "kernel has no deadlock", - "reason": "KernelHasNoDeadlock", - "status": "False", - "type": "KernelDeadlock" - }, - { - "lastHeartbeatTime": "2021-10-13T14:28:52Z", - "lastTransitionTime": "2021-09-25T17:15:13Z", - "message": "Filesystem is not read-only", - "reason": "FilesystemIsNotReadOnly", - "status": "False", - "type": "ReadonlyFilesystem" - }, - { - "lastHeartbeatTime": "2021-10-13T14:28:52Z", - "lastTransitionTime": "2021-09-25T17:15:13Z", - "message": "docker overlay2 is functioning properly", - "reason": "NoCorruptDockerOverlay2", - "status": "False", - "type": "CorruptDockerOverlay2" - }, - { - "lastHeartbeatTime": "2021-09-25T17:15:08Z", - "lastTransitionTime": "2021-09-25T17:15:08Z", - "message": "NodeController create implicit route", - "reason": "RouteCreated", - "status": "False", - "type": "NetworkUnavailable" - }, - { - "lastHeartbeatTime": "2021-10-13T14:30:05Z", - "lastTransitionTime": "2021-09-25T17:15:07Z", - "message": "kubelet has sufficient memory available", - "reason": "KubeletHasSufficientMemory", - "status": "False", - "type": "MemoryPressure" - }, - { - "lastHeartbeatTime": "2021-10-13T14:30:05Z", - "lastTransitionTime": "2021-09-25T17:15:07Z", - "message": "kubelet has no disk pressure", - "reason": "KubeletHasNoDiskPressure", - "status": "False", - "type": "DiskPressure" - }, - { - "lastHeartbeatTime": "2021-10-13T14:30:05Z", - "lastTransitionTime": "2021-09-25T17:15:07Z", - "message": "kubelet has sufficient PID available", - "reason": "KubeletHasSufficientPID", - "status": "False", - "type": "PIDPressure" - }, - { - "lastHeartbeatTime": "2021-10-13T14:30:05Z", - "lastTransitionTime": "2021-09-25T17:15:09Z", - "message": "kubelet is posting ready status. AppArmor enabled", - "reason": "KubeletReady", - "status": "True", - "type": "Ready" - } - ], - "daemonEndpoints": { - "kubeletEndpoint": { - "Port": 10250 - } - }, - "images": [ - { - "names": [ - "quay.io/armosec/k8s-ca-websocket-ubi@sha256:b90617d249cd4c75492eedce761a68093eb28e5557301331e71001c022f40a7a", - "quay.io/armosec/k8s-ca-websocket-ubi:latest" - ], - "sizeBytes": 193405009 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/adservice@sha256:c79557830d4e3b25ff29946b191d2dee609a2475b6a64a7466ad6374ab7d4ded", - "gcr.io/google-samples/microservices-demo/adservice:v0.2.3" - ], - "sizeBytes": 180082580 - }, - { - "names": [ - "quay.io/armosec/k8s-ca-oracle-ubi@sha256:b645fd828f9776700770fb8ba9da664c08bf3b50baf4a5227ae71cb02a279787", - "quay.io/armosec/k8s-ca-oracle-ubi:11" - ], - "sizeBytes": 165304873 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/recommendationservice@sha256:5f60c49888595555e7bbb16efa62ef3ec51efe0429c1eb4dd9acaf68f459ad13", - "gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3" - ], - "sizeBytes": 127474515 - }, - { - "names": [ - "gke.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001", - "k8s.gcr.io/kube-proxy-amd64:v1.20.9-gke.1001" - ], - "sizeBytes": 103386207 - }, - { - "names": [ - "quay.io/armosec/demoservice@sha256:4646027c2d9ad8b5d3f3e72602050e3c565802e5b12ff77bf0dc9514fe81063e", - "quay.io/armosec/demoservice:v4-debian" - ], - "sizeBytes": 92619426 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/emailservice@sha256:ab78ef231ea457860d161f52893c8f464580821f40866af5c0b0040eeb894117", - "gcr.io/google-samples/microservices-demo/emailservice:v0.2.3" - ], - "sizeBytes": 81396192 - }, - { - "names": [ - "gke.gcr.io/gcp-compute-persistent-disk-csi-driver@sha256:e9e3a3af496e330d473b7c5c42958de4ebc1c17fbbb311360b7ecdf7b28e1c93", - "gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.2.0-gke.8" - ], - "sizeBytes": 74280698 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/loadgenerator@sha256:360130ab58500ec7121e75e8003c156bda385e29713869018182857ab128ca7e", - "gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3" - ], - "sizeBytes": 70867506 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/currencyservice@sha256:49d458a3650f7f9d33e2509d152c540afeb1d9f50a66356331d898366ee71d68", - "gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3" - ], - "sizeBytes": 53785764 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/paymentservice@sha256:6eb201217a8f3540043d5f64be96b4c3470207b9cc1ea315c1f186595da02db6", - "gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3" - ], - "sizeBytes": 52652022 - }, - { - "names": [ - "gke.gcr.io/k8s-dns-node-cache@sha256:4231096625a3eb88fb630badb69d15fe3ca2403db318e141072e950050307586", - "gke.gcr.io/k8s-dns-node-cache:1.19.1-gke.1" - ], - "sizeBytes": 46401859 - }, - { - "names": [ - "quay.io/armosec/notification-server-ubi@sha256:4fc284ba63683e00468b92db20f51c1209ae475a6d0bd53c1b025964876d0eea", - "quay.io/armosec/notification-server-ubi:89" - ], - "sizeBytes": 42127446 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/cartservice@sha256:566733b4d2d53d9af0cd3db9d267812ff78c8ffd4f49c68e8600eaf02fe285bc", - "gcr.io/google-samples/microservices-demo/cartservice:v0.2.3" - ], - "sizeBytes": 20500350 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/frontend@sha256:ca5c0f0771c89ec9dbfcbb4bfbbd9a048c25f7a625d97781920b35db6cecc19c", - "gcr.io/google-samples/microservices-demo/frontend:v0.2.3" - ], - "sizeBytes": 20370522 - }, - { - "names": [ - "asia.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:3b600d2d5eafa6d5fcedbd783b28694af3f7dd470f3580e83200244fab32b35e", - "gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:3b600d2d5eafa6d5fcedbd783b28694af3f7dd470f3580e83200244fab32b35e", - "eu.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:3b600d2d5eafa6d5fcedbd783b28694af3f7dd470f3580e83200244fab32b35e", - "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.8.1-gke.0", - "eu.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64:1.8.1-gke.0" - ], - "sizeBytes": 16833220 - }, - { - "names": [ - "gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:e3f48b3d1e49cfa3e7f002020769c9cd01cd0e77bbc99dc133c7ab0f8097e989", - "asia.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:e3f48b3d1e49cfa3e7f002020769c9cd01cd0e77bbc99dc133c7ab0f8097e989", - "eu.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64@sha256:e3f48b3d1e49cfa3e7f002020769c9cd01cd0e77bbc99dc133c7ab0f8097e989", - "eu.gcr.io/gke-release-staging/cluster-proportional-autoscaler-amd64:1.7.1-gke.0", - "gke.gcr.io/cluster-proportional-autoscaler-amd64:1.7.1-gke.0" - ], - "sizeBytes": 16572417 - }, - { - "names": [ - "eu.gcr.io/gke-release-staging/cpvpa-amd64@sha256:b802d79f207ea9cbc996cc208781ea34715fe796be68e5250da37b2ae73d42a6", - "asia.gcr.io/gke-release-staging/cpvpa-amd64@sha256:b802d79f207ea9cbc996cc208781ea34715fe796be68e5250da37b2ae73d42a6", - "gcr.io/gke-release-staging/cpvpa-amd64@sha256:b802d79f207ea9cbc996cc208781ea34715fe796be68e5250da37b2ae73d42a6", - "gcr.io/gke-release-staging/cpvpa-amd64:v0.8.3-gke.0", - "eu.gcr.io/gke-release-staging/cpvpa-amd64:v0.8.3-gke.0" - ], - "sizeBytes": 16376177 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/productcatalogservice@sha256:5a4a0e54c6d01285ffc96a12caf0976c2297fc922896c17262828fcc9d0211bf", - "gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3" - ], - "sizeBytes": 14630674 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/shippingservice@sha256:0cb1707fc503909e6744ad77fefabeed2e056d17ede3be3ced366800fb88e4da", - "gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3" - ], - "sizeBytes": 14599818 - }, - { - "names": [ - "gcr.io/google-samples/microservices-demo/checkoutservice@sha256:0fad1066de777eb37ebaae88afda058b8b9cb215f977b22a7bab508b5d56dc7d", - "gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3" - ], - "sizeBytes": 14575100 - }, - { - "names": [ - "docker.io/library/redis@sha256:58132ff3162cf9ecc8e2042c77b2ec46f6024c35e83bda3cabde76437406f8ac", - "docker.io/library/redis:alpine" - ], - "sizeBytes": 10916691 - }, - { - "names": [ - "k8s.gcr.io/metrics-server-amd64@sha256:c9c4e95068b51d6b33a9dccc61875df07dc650abbf4ac1a19d58b4628f89288b", - "k8s.gcr.io/metrics-server-amd64:v0.3.6" - ], - "sizeBytes": 10542830 - }, - { - "names": [ - "gke.gcr.io/csi-node-driver-registrar@sha256:877ecfbb4119d63e83a45659044d128326f814ae1091b5630e236930a50b741d", - "gke.gcr.io/csi-node-driver-registrar:v2.1.0-gke.0" - ], - "sizeBytes": 10028812 - }, - { - "names": [ - "asia.gcr.io/gke-release-staging/addon-resizer@sha256:fe1d103a6ccdbee3a8d32fb2b20fe400f16283767040cb295a68d61b1096e91d", - "gcr.io/gke-release-staging/addon-resizer@sha256:fe1d103a6ccdbee3a8d32fb2b20fe400f16283767040cb295a68d61b1096e91d", - "eu.gcr.io/gke-release-staging/addon-resizer@sha256:fe1d103a6ccdbee3a8d32fb2b20fe400f16283767040cb295a68d61b1096e91d", - "eu.gcr.io/gke-release-staging/addon-resizer:1.8.11-gke.0", - "gcr.io/gke-release-staging/addon-resizer:1.8.11-gke.0" - ], - "sizeBytes": 9653144 - } - ], - "nodeInfo": { - "architecture": "amd64", - "bootID": "af5f5969-a5cb-4bc8-84ba-a767a781b10e", - "containerRuntimeVersion": "containerd://1.4.4", - "kernelVersion": "5.4.120+", - "kubeProxyVersion": "v1.20.9-gke.1001", - "kubeletVersion": "v1.20.9-gke.1001", - "machineID": "65db7641f7c0b539cfef1d12054972e8", - "operatingSystem": "linux", - "osImage": "Container-Optimized OS from Google", - "systemUUID": "65db7641-f7c0-b539-cfef-1d12054972e8" - } - } - } - ], - "listInputKinds": null - } - ], - "remediation": "To mitigate this vulnerability without upgrading kubelet, you can disable the VolumeSubpath feature gate on kubelet and kube-apiserver, or remove any existing Pods using subPath or subPathExpr feature.", - "description": "A user may be able to create a container with subPath or subPathExpr volume mounts to access files \u0026 directories anywhere on the host filesystem. Following Kubernetes versions are affected: v1.22.0 - v1.22.1, v1.21.0 - v1.21.4, v1.20.0 - v1.20.10, version v1.19.14 and lower. This control checks the vulnerable versions and the actual usage of the subPath feature in all Pods in the cluster.", - "score": 100 - } - ], - "score": 17 -}`